CVE-2023-24426

Jenkins Azure AD Plugin 303.va91ef20ee49f and earlier does not invalidate the previous session on login...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome GuestView that originates from reuse after release...

openEuler byacc 资源管理错误漏洞

byacc is an open source syntax parser generation tool from openeuler. openEuler byacc has a security vulnerability , the vulnerability stems from the existence of post-release reuse of malloc when handling annotations...

assimp 资源管理错误漏洞

assimp is assimp open source a library . It is used to import and export various 3D model formats. assimp version 5.1.4 security vulnerability , the vulnerability stems from the file /code/AssetLib/Collada/ColladaParser.cpp in the function ColladaParser::ExtractDataObjectFromChannel there is a...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in versions prior to GPAC 2.3.0-DEV that stems from post-release reuse in the GitHub repository gpac/gpac...

Reuse of signature to get KYCd after it has been removed

Lines of code Vulnerability details Impact There is no time limit on the validity off KYC digests and users with a removed KYC are not saved. If a issuer of such a digest is either compromised or if they by mistake issue a digest with a deadline far into the future a user could reuse the same...

KYC signature can be reused to regain KYC status

Lines of code Vulnerability details The function addKYCAddressViaSignature of the KYCRegistry contract allows a user to be granted a KYC status using a signature provided by Ondo. The function validates that the signer has the corresponding role for the requirement group and adds the user to the...

The vulnerability of the fs/io_uring.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c component in the Linux kernel operating system is related to the reutilization of freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-1147)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect manipulation of iouring and IORINGOPSPLICE, resulting in memory reuse after release...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a Resource Management Error vulnerability that stems from a race condition in the MCTP implementation that results in reuse after release, which can be exploited by an attacker ...

Mozilla Thunderbird Resource Management Error Vulnerability (CNVD-2023-03054)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. Mozilla Thunderbird suffers from a resource management error vulnerability that stems fro...

USN-5789-1 linux-oem-5.14 vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Jann Horn discovered that the...

Aruba Networks ClearPass Policy Manager 授权问题漏洞

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. An authorization issue vulnerability exists in Aruba EdgeConnect Enterprise Orchestrator. An attacker could use this vulnerability to continue a session...

GPAC MP4Box 资源管理错误漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A resource management error vulnerability exists in GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b,...

MediaTek 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a race condition in vow, with the potential for post-release reuse, which could lead to a local privilege escalation that requires system...

MediaTek Chipsets 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a logic error in mtk-aie, which may be reused after release, which could lead to a local privilege escalation that requires system execution...

MediaTek 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a competing condition in the disp, which may be subject to post-release reuse, which could lead to a local privilege escalation that requires...

MediaTek 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a logic error in mtk-isp that may allow for post-release reuse, which could lead to local privilege escalation requiring system execution...

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a logic error in mtk-aie, which may be reused after release, which could lead to a local privilege escalation that requires system execution...