6860 matches found
tifig 资源管理错误漏洞
tifig is a Monostream open source fast HEIF image converter for thumbnails. A security vulnerability exists in tifig version v0.2.2, which stems from a heap-release reuse of its temInfoEntry function...
dproxy 环境问题漏洞
dproxy is an intelligent caching DNS proxy from the personal developer Matthew Pratt. A security vulnerability exists in dproxy that stems from its reuse of DNS transaction ID values from client queries leading to an attacker performing a DNS cache poisoning attack...
Vim 资源管理错误漏洞
Vim is a cross-platform text editor. versions of Vim prior to 9.0.0213 are vulnerable to a resource management error that stems from post-release reuse. No detailed vulnerability details are currently available...
CVE-2022-35961 ECDSA signature malleability in OpenZeppelin Contracts
OpenZeppelin Contracts is a library for secure smart contract development. The functions ECDSA.recover and ECDSA.tryRecover are vulnerable to a kind of signature malleability due to accepting EIP-2098 compact signatures in addition to the traditional 65 byte signature format. This is only an issu...
Fortinet多款产品 代码问题漏洞
Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is Fortinet FortiSwitchManager is a network switch management tool designed to help organizations manage their...
Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2022-58460)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader is vulnerable to a resource management error vulnerability that originates from reuse after release. The vulnerability stems from a confusion in...
Adobe Acrobat Reader 资源管理错误漏洞
Adobe Acrobat Reader is a PDF viewer from Adobe, a U.S. company. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader is vulnerable to a resource management error that stems from post-release reuse, resulting in a memory leak. No details of the vulnerability are currently...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel nftables cross-table, which stems from reuse-after-release and allows a locally privileged attacker to cause...
Google Google 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 101.0.4951.41, which stemmed from a post-release reuse issue with Base Internals...
updateProjectHash does not check project address
Lines of code Vulnerability details In Project.sol, function updateProjectHash L162, data which is signed by builder and/or contractor does not contain a reference to the project address. In all other external functions of Project.sol, data contains the address of the project, used in this check:...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability previously existed in Google Chrome version 102.0.5005.61, which stemmed from a post-release reuse issue in the UI...
PT-2022-3991 · Nvidia · Nvidia Virtual Gpu Manager
Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU Manager affected versions not specified Description: The issue is related to a memory reuse error in the NVIDIA Virtual GPU Manager component of the NVIDIA Virtual GPU driver. Exploiting this issue could allow an attacker t...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel ConnMan version 1.41, which stems from the existence of a post-release reuse issue with WISPR, and can be exploited by an attack...
F5 BIG-IP 代码问题漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A session expiration time insufficient vulnerability exists in F5 BIG-IP iControl REST, which stems from the fact that after...
EulerOS 2.0 SP10 : curl (EulerOS-SA-2022-2153)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...
SDL 资源管理错误漏洞
github SDL is a software application. Simple Directmedia Layer A security vulnerability exists in SDL v1.2, which stems from a post-release reuse condition found via the XFree function in /src/video/x11/SDLx11yuv.c. The vulnerability was discovered by using the XFree function in...
CVE-2022-36315
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox 103...
yasm 资源管理错误漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0, which stems from post-release reuse of the yasmintnumdestroy function in libyasm/intnum.c. The vulnerability is caused by the use of the yasmintnumdestroy function in...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.6.2, which stems from the reuse of VTDISALLOCATE after release...