7597 matches found
F5 BIG-IP File Upload Vulnerability
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A file upload vulnerability exists in the F5 BIG-IP, which can be exploited by an attacker to upload malicious files for furth...
Linux kernel denial of service vulnerability (CNVD-2021-24271)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 5.11.8 and earlier versions, which originates in a user-space application that may cause a system crash. No details of the...
Microsoft Windows本地提权漏洞（CVE-2021-1732）
CVE-2021-1732: win32kfull xxxCreateWindowEx callback out-of-bounds Mar 25, 2021 • iamelli0t CVE-2021-1732 is a 0-Day vulnerability exploited by the BITTER APT organization in one operation which was disclosed in February this year123. This vulnerability exploits a user mode callback opportunity i...
SAMSUNG Mobile devices 安全漏洞
Samsung SMR is a system firmware from Samsung South Korea. It provides storage for system applications. A security vulnerability exists in SMR MAR-2021 Release 1, which stems from an improper access control vulnerability that exposes sensitive kernel information to user space. No detailed...
[SECURITY] Fedora 34 Update: nettle-3.7.2-1.fc34
Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages C++, Python, Pike, ..., in applications like LSH or GNUPG, or even in kernel space...
Junos Space Security Director Detection
Binary data junipersecuritydirectorwebui.nbin...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 5.11.8 and earlier versions, which originates in a user-space application that may cause a system crash. No details of the...
CVE-2021-28667
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...
CVE-2021-28667
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...
Design/Logic Flaw
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...
CVE-2021-28667
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...
CVE-2021-28667
StackStorm before 3.4.1 is affected by an infinite-loop vulnerability that can consume all available memory and disk space when logging Unicode data if Python 3.x is used and the locale is not UTF-8. Root cause is an unbounded loop triggered during logging of Unicode data from actions or rules. I...
StackStorm 安全漏洞
StackStorm is an event-driven automation platform. The platform is mainly used for automated repair, security response, troubleshooting and program deployment functions. A security vulnerability exists in StackStorm before 3.4.1, which stems from the fact that StackStorm has an infinite loop that...
PT-2021-2511 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.11.8 Description: The issue is related to a user-tolerable buffer overflow in the RPA PCI Hotplug driver when writing a new device name to the driver from userspace, allowing userspace to write data to the kern...
DEBIAN-CVE-2021-28375
An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...
PT-2024-11111 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a panic that occurs during the f2fs resize fs function in the Linux kernel. This happens when the filesystem is resized to a smaller size, and there is not enou...
F5 BIG-IP 代码问题漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A file upload vulnerability exists in the F5 BIG-IP, which can be exploited by an attacker to upload malicious files for furth...
Low: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update
An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...