Lucene search
+L

7966 matches found

Positive Technologies
Positive Technologies
added 2022/01/01 12:00 a.m.12 views

PT-2025-8293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel, specifically in the drm/panfrost component. This occurs because a job structure references panfrost priv to access the MMU context, eve...

7.8CVSS6.3AI score0.00269EPSS
SaveExploits0
OSV
OSV
added 2021/12/30 10:33 p.m.6 views

OPENSUSE-SU-2021:1646-1 Security update for privoxy

This update for privoxy fixes the following issues: privoxy was updated to 3.0.33 boo1193584: CVE-2021-44543: Encode the template name to prevent XSS cross-side scripting when Privoxy is configured to servce the user-manual itself CVE-2021-44540: Free memory of compiled pattern spec before bailin...

7.5CVSS6.6AI score0.01393EPSS
SaveExploits0References6
OSV
OSV
added 2021/12/30 2:45 a.m.16 views

GSD-2021-1002840 mm, hwpoison: fix condition in free hugetlb page path

mm, hwpoison: fix condition in free hugetlb page path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.7 views

The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.

The vulnerability of the OpenLDAP protocol is related to the reclamation of memory. Exploiting this vulnerability allows a malicious actor to perform a service denial by sending a specially crafted request to slapd...

7.8CVSS6.9AI score0.043EPSS
SaveExploits0References16Affected Software7
ATTACKERKB
ATTACKERKB
added 2021/12/26 5:15 a.m.5 views

CVE-2021-44078

An issue was discovered in splitregion in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the...

8.1CVSS7.6AI score0.00528EPSS
SaveExploits0References6
PyPA
PyPA
added 2021/12/26 5:15 a.m.8 views

PYSEC-2021-868

An issue was discovered in splitregion in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the...

8.1CVSS7.7AI score0.00528EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/12/23 8:15 p.m.18 views

CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

7.5CVSS6.6AI score
SaveExploits0References2
OSV
OSV
added 2021/12/23 8:15 p.m.4 views

DEBIAN-CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

7.5CVSS7.2AI score0.01393EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/23 8:15 p.m.8 views

CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

7.5CVSS7AI score0.01393EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/12/23 8:15 p.m.7 views

CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

7.5CVSS7AI score0.01313EPSS
SaveExploits0References5
NVD
NVD
added 2021/12/23 8:15 p.m.22 views

CVE-2020-3886

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to execute arbitrary code with kernel privileges...

9.3CVSS0.0096EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/23 8:15 p.m.7 views

CVE-2020-3886

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to execute arbitrary code with kernel privileges...

7.8CVSS7.3AI score0.0096EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/23 8:15 p.m.12 views

UBUNTU-CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

7.5CVSS7AI score0.01313EPSS
SaveExploits0References5
Prion
Prion
added 2021/12/23 8:15 p.m.22 views

Design/Logic Flaw

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to execute arbitrary code with kernel privileges...

9.3CVSS7.7AI score0.0096EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/23 7:48 p.m.33 views

CVE-2020-3886

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to execute arbitrary code with kernel privileges...

7.7AI score0.0096EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/23 7:48 p.m.70 views

CVE-2020-3886

CVE-2020-3886 is a use-after-free vulnerability in the Intel Graphics Driver on macOS. Root cause: memory corruption due to a use-after-free issue, addressed by Apple via memory management improvements. Affected impact: could allow a malicious application to execute arbitrary code with kernel pri...

9.3CVSS7.6AI score0.0096EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/12/13 12:00 a.m.7 views

PT-2021-24127 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A vulnerability was found in Privoxy, which was fixed by freeing the memory of the compiled pattern spec before bailing in the get url spec param function. Recommendations: At the moment,...

7.8CVSS7.5AI score0.02355EPSS
SaveExploits0References61
OSV
OSV
added 2021/11/24 2:15 a.m.8 views

ALPINE-CVE-2021-28709

issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/24 2:15 a.m.25 views

Design/Logic Flaw

issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...

6.9CVSS7.4AI score0.00338EPSS
SaveExploits0References5Affected Software3
OSV
OSV
added 2021/11/24 2:15 a.m.8 views

UBUNTU-CVE-2021-28709

issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References3
Rows per page
Query Builder