PT-2023-1957 · Unknown +2 · Libmemcached-Awesome +2

Name of the Vulnerable Software and Affected Versions: libmemcached-awesome versions prior to 1.1.4 Description: The issue is related to insufficient protection of service data when handling the POLL TIMEOUT parameter, which could allow a remote attacker to gain unauthorized access to protected...

JTEKT Kostac PLC Programming Software 资源管理错误漏洞

JTEKT Kostac PLC Programming Software is PLC programmer software for personal computers from JTEKT Japan. A security vulnerability exists in JTEKT Kostac PLC Programming Software version 1.6.9.0 and prior versions, which originates from memory reuse after release. An attacker could exploit the...

IBM Rational ClearCase 8.0 < 9.0.1.14 / 9.0.2 < 9.0.2.6 / 9.1 < 9.1.0.3 Multiple Vulnerabilities

The version of IBM Rational ClearCase installed on the remote host is affected by multiple vulnerabilities, including the following: - A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when '--no-clobber' is used together with '--remove-on-error'...

curl: CVE-2023-27535: FTP too eager connection reuse

A vulnerability existed in libcurl FTPS protocol that allowed the reuse of a connection even if different credentials were specified for different connections, resulting in the use of cached credentials for the wrong content. The vulnerability was caused by the failure to refuse caching when...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that originates from a post-release reuse flaw in the integrated infrared receiver, transceiver driver when the user separates rc devices in a manner that can be...

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.17.2, which stems from reuse after release...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that stems from corruption of memory due to reuse after release, which could be exploited by an attacker to cause local privilege escalation...

Apple macOS 资源管理错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS prior to Ventura 13, which stems from a memory reuse after release issue. An attacker could exploit this vulnerability to cause the system to terminate...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.0.8, which stems from the presence of post-release reuse...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.0.8, which stems from the presence of post-release reuse...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.0.8, which stems from the presence of post-release reuse...

Linux kernel 品资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. The Linux kernel suffers from a resource management error vulnerability that stems from the Upper Layer Protocol ULP subsystem in the Linux kernel not properly handling sockets that enter the LISTE...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome on Android prior to version 110.0.5481.177, which stems from memory reuse after release in the Web Payments API. An attacker exploits the vulnerability to cause heap corruption...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which originates from memory reuse after release in Prompts. An attacker exploits the vulnerability to cause heap corruption via specially...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which stems from memory reuse after release in Vulkan. An attacker exploits the vulnerability to cause heap corruption via specially crafted HT...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177 that originates from memory reuse after release in SwiftShader. An attacker exploits the vulnerability to cause heap corruption via specially...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome on Windows prior to version 110.0.5481.177, which originates from memory reuse after release in WebRTC. An attacker exploits the vulnerability to cause heap corruption via...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which originates from memory reuse after release in Video. An attacker exploits the vulnerability to cause heap corruption via specially crafte...

K98776835: Apache Tomcat vulnerability - CVE-2018-8037

Security Advisory Description If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NI...