2727 matches found
CVE-2021-47022
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix memleak when mt7615unregisterdevice mt7615txtokenput should get call before mt76freependingtxwi...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible invalid register access Disable the interrupt and synchronze for the pending irq handlers to ensure the irq tasklet is not being scheduled after the suspend to avoid the possible invalid register access...
UBUNTU-CVE-2021-47022
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix memleak when mt7615unregisterdevice mt7615txtokenput should get call before mt76freependingtxwi...
UBUNTU-CVE-2021-47021
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix memleak when mt7915unregisterdevice mt7915txtokenput should get call before mt76freependingtxwi...
CVE-2021-47019 mt76: mt7921: fix possible invalid register access
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible invalid register access Disable the interrupt and synchronze for the pending irq handlers to ensure the irq tasklet is not being scheduled after the suspend to avoid the possible invalid register access...
SUSE CVE-2021-46924
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...
PT-2024-2053 · Ibm · Ibm Engineering Requirements Management Doors
Name of the Vulnerable Software and Affected Versions: IBM Engineering Requirements Management versions 9.7.2.7 Description: The issue exists due to insufficient protection of the web page structure, allowing a remote attacker to exploit it and potentially disclose protected information. This...
DEBIAN-CVE-2021-46924
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...
CVE-2021-46924
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...
UBUNTU-CVE-2021-46924
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...
PT-2024-20267 · Code Projects · Code-Projects Computer Book Store
Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue is related to SQL Injection via BookSBIN. Recommendations: For Code-projects Computer Book Store version 1.0, consider restricting access to the BookSBIN component to minimi...
CAN-2004-0028
CVE-2004-0028 relates to jitterbug, a CGI bug-tracking tool. The issue is improper input sanitization in jitterbug 1.6.2 that allows remote authenticated users to execute arbitrary commands on the server. Debian’s DSA-420-1 and related advisories record this as a remote command-execution vulnerab...
CAN-2004-0458
CVE-2004-0458 affects mah-jong (server component) prior to version 1.6.2. A missing argument can trigger a NULL pointer dereference, allowing remote attackers to cause a denial of service (server crash). Public advisories reference Debian (DSA-503), Ubuntu, and CVE records; the mitigation is to u...
CAN-2004-0837
MODE C The CVE CAN-2004-0837 (CVE-2004-0837) has concrete OpenVAS/related advisories tying it to MySQL in multiple decks. Affected entries/drivers include: SUSE/SLES9 (Security update for MySQL; CVSS 10.0; patches 120293-02, 120292-02), Gentoo GLSA 200410-22 (MySQL), Gentoo/OpenVAS entries refere...
CAN-2004-0981
CVE-2004-0981 is linked to ImageMagick and is discussed in multiple advisories (Debian DSA 593-1, Gentoo GLSA 200411-11, Ubuntu USN-7-1/USN-10-1, FreeBSD Ports) with CVSS base 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C). The OpenVAS entries and Gentoo/Ubuntu/Debian advisories describe a vulnerability in Im...
CAN-2004-1179
CVE-2004-1179 affects the debmake package: the debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack in temporary directories. The provided documents identify the affected versions and the local access requirement;...
CAN-2004-1318
Summary of CVE-2004-1318 (Namazu): Namazu2’s namazu.cgi accepts input that is not properly sanitised, allowing a remote attacker to cause cross-site scripting (XSS). The Debian advisories (DSA-627-1) describe the flaw as unsanitised input in Namazu2, with exploitation via a crafted query, notably...
CAN-2005-0071
The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...
CAN-2004-1120
The CVE CAN-2004-1120 applies to prozilla (a multi-threaded download accelerator). Multiple buffer overflow flaws could be triggered remotely to execute arbitrary code. Public advisories (e.g., Debian DSA-663-1) document remote code execution via these overflows and list fixed versions: prozilla ...
CAN-2005-0448
CVE-2005-0448 is a race condition in Perl's File::Path::rmtree that could allow a local user to create setuid binaries or delete arbitrary files via a symlink attack. Connected advisories confirm this issue as the original rmtree race (not a remote exploit) and note it has been reintroduced in ce...