CVE-2021-46668: Uncontrolled Resource Consumption

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

ALPINE-CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

CVE-2021-43971

A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter...

QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...

southernselectautosales.com Cross Site Scripting vulnerability OBB-2318535

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2021-1002661 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...

PT-2021-27236

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27183

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27094

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.294 Description The issue is related to a sanity check in the resp mode select function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27108

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description A sanity check has been added to the resp mode select function to verify the block descriptor length. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-8228

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.15.0-01d0625 Description The vulnerability is related to a use-after-free issue in the resp mode select function of the scsi debug component. This issue can be exploited to potentially elevate privileges in the system. T...

QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...

QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...

Denial Of Service (DoS)

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...

Mozilla Firefox Security Advisory (MFSA2013-94) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...

RLSA-2021:4396 Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

sqlite security update

An update is available for sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset o...