PT-2021-8146 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.0-rc5+ Description: The vulnerability is related to the veth component of the Linux kernel, which fails to properly check for shared or cloned skbs when GRO is enabled on a veth device and TSO is disabled o...

UBUNTU-CVE-2021-4001

A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. This flaw affects kernel...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open-source operating system Linux.KVM is one of the kernel-based virtual machines. A buffer error vulnerability exists in versions of the Linux kernel prior to 5.12. The vulnerability this could lead to out-of-bounds writes. No details of...

DEBIAN-CVE-2020-13956

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution...

Linux kernel code issue vulnerability (CNVD-2020-68542)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.3, which stems from the presence of an issue related to mm/gup.c and mm/hugememory.c. The getuserpages...

Advantech iView Path Traversal Vulnerability

Advantech iView is a device management application from Advantech. A path traversal vulnerability exists in the handling of calls to the importZtpConfiguration method in the ZTPConfig class in Advantech iView 5.6 and earlier versions. An attacker can exploit this vulnerability to create or downlo...

Linux kernel resource management error vulnerability (CNVD-2020-52840)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the tty-discdata handling of the drivers/net/slip/slip.c and drivers/net/can/slcan.c files in versions of Linux...

UBUNTU-CVE-2020-10751

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages...

PT-2020-3138 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: A flaw in the Linux kernel's SELinux LSM hook implementation allows for insufficient authentication of data. This issue arises because the hook incorrectly assumes that a socket buffer skb...

CVE-2018-16266

The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

UBUNTU-CVE-2020-2725

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

Linux kernel memory leak vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.0.3. An attacker could exploit this vulnerability to cause a denial of service memory leak...

Linux kernel code issue vulnerability (CNVD-2019-29599)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A code issue vulnerability exists in the drivers/usb/misc/sisusbvga/sisusb.c file in versions of Linux kernel prior to 5.1.8. The vulnerability stems from an improperl...

PT-2019-19771 · Project Jupyter +2 · Jupyter Notebook +2

Name of the Vulnerable Software and Affected Versions: Jupyter Notebook versions prior to 5.7.6 Description: A cross-site inclusion issue allows malicious pages to include resources when visited by authenticated users of a Jupyter server. This can lead to access of resource content, particularly...

CVE-2019-2448

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

UBUNTU-CVE-2019-2523

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

CVE-2018-3294

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-08337)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...

zsh null pointer dereference vulnerability (CNVD-2018-06435)

zsh is an interactive command interpreter and command programming language used on Linux systems. A security vulnerability exists in the buildin.c file in zsh versions prior to 5.4. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

NoMachine for Mac OS X and Linux Elevation of Privilege Vulnerability

NoMachine for Mac OS X and Linux is a remote desktop access tool from Luxembourg-based NoMachine for Mac OS X and Linux platforms. A security vulnerability exists in the server utility in versions of NoMachine prior to 5.3.10 for Mac OS X and Linux. The vulnerability can be exploited to gain...