PT-2024-29259 · Undertow · Undertow

Name of the Vulnerable Software and Affected Versions: Undertow affected versions not specified Description: A flaw was found in Undertow, where an HTTP request header value from a previous stream may be incorrectly reused for a request associated with a subsequent stream on the same HTTP/2...

Important: postgresql16

Issue Overview: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query...

undertow: information leakage via HTTP/2 request header reuse

REJECTED CVE A vulnerability has been identified in the Undertow package where the readHpackString method may incorrectly reuse an HTTP request header value from a previous stream for a new request on the same HTTP/2 connection due to improper handling of the stringBuilder field. While this...

undertow: information leakage via HTTP/2 request header reuse

REJECTED CVE A vulnerability has been identified in the Undertow package where the readHpackString method may incorrectly reuse an HTTP request header value from a previous stream for a new request on the same HTTP/2 connection due to improper handling of the stringBuilder field. While this...

GStreamer 资源管理错误漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. A resource management error vulnerability exists in GStreamer, which stems from the fact that it could lead to post-release reuse under certain circumstances...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that originates from the nav2amcl process containing post-release reuse. The vulnerability is triggered by remotely sending a request to change the value of odomframeid in a dynamic...

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete event simulation and automation software from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena version 16.20.00 and prior versions that stems from the presence of a post-release reuse vulnerability that allows a threat...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that originates from the nav2amcl process containing a post-release reuse vulnerability. An attacker exploiting this vulnerability could be triggered by sending a request to change dynami...

OpenHarmony 安全漏洞

OpenHarmony is an open source project of a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A security vulnerability exists in OpenHarmony version v4.1.1 and earlier versions, which originates from memory reuse after release. An attacker can exploit the vulnerability...

The vulnerability of the macsec_free_netdev() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the macsecfreenetdev function in the drivers/net/macsec.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the nvme_rdma_free_queue() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmerdmafreequeue function in the drivers/nvme/host/rdma.c file of the Linux NVMe kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the xt_find_table_lock() function in the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xtfindtablelock function in the net/netfilter/xtables.c module of the netfilter component of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the add_pble_prm() function in the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the addpbleprm function in the drivers/infiniband/hw/irdma/pble.c file of the Linux kernel’s InfiniBand driver is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

CVE-2024-52732

CVE-2024-52732 affects wms-Warehouse management system-zeqp v2.20.9.1. The root cause is incorrect access control caused by reuse of the zeqp system token, enabling unauthorized access. Documented impact indicates high confidentiality and integrity risk with a critical CVSS:3.1 score (AV:N, AC:L,...

PT-2024-35423 · Unknown · Wms-Warehouse Management System-Zeqp

Name of the Vulnerable Software and Affected Versions: wms-Warehouse management system-zeqp version 2.20.9.1 Description: The issue is related to incorrect access control due to the reuse of the token value of the zeqp system. This allows unauthorized access. Recommendations: For version 2.20.9.1...

CVE-2024-52732

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

Warehouse Management System 安全漏洞

Warehouse Management System is a warehouse management system by Carlo Montero Personal Developer. A security vulnerability exists in Warehouse Management System version v2.20.9.1, which stems from a reused token value in the zeqp system, resulting in incorrect access control...

IrfanView Post-Release Reuse Vulnerability (CNVD-2024-47205)

IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from a post-release reuse vulnerability that can be exploited by an attacker to execute code in the context of the current process...

IrfanView Post-Release Reuse Vulnerability (CNVD-2024-47208)

IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from a post-release reuse vulnerability that can be exploited by an attacker to execute code in the context of the current process...

Zabbix 资源管理错误漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A resource management error vulnerability exists in Zabbix, which stems from the presence of a post-release reuse vulnerability that stem...