JetBrains Kotlin Elevation of Privilege Vulnerability

JetBrains Kotlin is a statically typed programming language from the Czech company JetBrains that runs on the Java Virtual Machine. An elevation of privilege vulnerability exists in JetBrains Kotlin versions 1.4-M1 through 1.4-RC. No details of the vulnerability are provided at this time...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0032)

The remote OracleVM system is missing necessary patches to address critical security updates : - uek-rpm: Add OL6 shim conflict for new signing key Eric Snowberg Orabug: 31688239 - Revert 'certs: Add Oracle's new X509 cert into the kernel keyring' Eric Snowberg Orabug: 31688223 - blk-mq: don't...

CVE-2020-15824

CVE-2020-15824 affects JetBrains Kotlin from 1.4-M1 to 1.4-RC, with Kotlin 1.3.7x unaffected. The issue is a script-cache privilege escalation caused by cached kotlin-main-kts scripts in the system temporary directory, which is shared by all users by default. The vulnerability is fixed in Kotlin ...

Fastify Resource Management Error Vulnerability

Fastify is an OpenJS Foundation open source web framework for Node.js. A resource management error vulnerability exists in Fastify versions v2.14.1 and v3.0.0-rc.4. An attacker can exploit this vulnerability to cause resource exhaustion denial of service...

mruby buffer overflow vulnerability (CNVD-2020-42943)

mruby is a lightweight implementation of the Ruby language. A buffer overflow vulnerability exists in the 'mrbyieldwithclass' function in the vm.c file in mruby 2.1.2-rc and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...

jenkins-git-client-plugin: OS command injection via 'git ls-remote'

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

CVE-2019-10392

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...

RUSTSEC-2020-0045 bespoke Cell implementation allows obtaining several mutable references to the same data

The custom implementation of a Cell primitive in the affected versions of this crate does not keep track of mutable references to the underlying data. This allows obtaining several mutable references to the same object which may result in arbitrary memory corruption, most likely use-after-free. T...

bespoke Cell implementation allows obtaining several mutable references to the same data

The custom implementation of a Cell primitive in the affected versions of this crate does not keep track of mutable references to the underlying data. This allows obtaining several mutable references to the same object which may result in arbitrary memory corruption, most likely use-after-free. T...

bespoke Cell implementation allows obtaining several mutable references to the same data

The custom implementation of a Cell primitive in the affected versions of this crate does not keep track of mutable references to the underlying data. This allows obtaining several mutable references to the same object which may result in arbitrary memory corruption, most likely use-after-free. T...

CVE-2019-19543

In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...

DEBIAN-CVE-2019-19543

In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...

CVE-2019-19543

In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...

CVE-2019-19543

In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...

CVE-2019-19543

In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...

Reliable Controls LicenseManager

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Reliable Controls Equipment: LicenseManager Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to crash the system, view sensitive...

CVE-2019-19543: Use After Free

In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...

UBUNTU-CVE-2014-1936

rc before 1.7.1-5 insecurely creates temporary files...

CVE-2014-1936

rc before 1.7.1-5 insecurely creates temporary files...

CVE-2014-1936

CVE-2014-1936 concerns the temporary file handling in the rc project’s Temp File Handler. Multiple connected sources confirm that rc versions before 1.7.1-5 insecurely create temporary files, enabling potential unauthorized access to protected information (root cause: insecure temporary file crea...