4853 matches found
CVE-2022-21443
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Difficult to exploit...
Microsoft Exchange Mailbox Assistants 15.0.847.40 - Unquoted Service Path Vulnerability
Exploit Title: Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC : ============== C:\sc qc...
CLSA-2022-1649869212 Fix CVE(s): CVE-2022-28388
CVE-2022-28388 - ELSCVE-3855 can: usb8dev: usb8devstartxmit: fix double devkfreeskb in error path...
usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.
...
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
...
mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.
...
PT-2022-11840 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: JerryScript versions prior to 2.4.0 Description: A Heap-based Buffer Overflow issue exists via an out-of-bounds read in the parser parse for statement start function in the js-parser-statm.c file. Recommendations: For versions prior to 2.4.0,...
OSV-2022-304 Heap-use-after-free in decode_mcu
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46335 Crash type: Heap-use-after-free WRITE 4 Crash state: decodemcu consumedata jpegstartdecompress...
DEBIAN-CVE-2022-27649
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker Engine, where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to...
CVE-2022-27649
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker Engine, where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to...
AZL-9295 CVE-2022-28390 affecting package kernel for versions less than 5.15.37.1-2
emsusbstartxmit in drivers/net/can/usb/emsusb.c in the Linux kernel through 5.17.1 has a double free...
CVE-2022-28389
mcbausbstartxmit in drivers/net/can/usb/mcbausb.c in the Linux kernel through 5.17.1 has a double free...
CVE-2022-28390
emsusbstartxmit in drivers/net/can/usb/emsusb.c in the Linux kernel through 5.17.1 has a double free...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in emsusbstartxmit in drivers/net/can/usb/emsusb.c in Linux kernel 5.17.1 and earlier, which stems from a double release...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in mcbausbstartxmit in drivers/net/can/usb/mcbausb.c in Linux kernel 5.17.1 and earlier, which stems from a double release...
Pool Credit Line May Not Able to Start When _borrowAsset is Non ERC20 Compliant Tokens
Lines of code Vulnerability details Impact IERC20borrowAsset.transferto, fee; If the USDT token is supported as borrowAsset, the unsafe version of .transferto, fee may revert as there is no return value in the USDT token contract’s transfer implementation but the IERC20 interface expects a return...
_withdrawLiquidity() is Not Consistent With start()
Lines of code Vulnerability details Impact withdrawLiquidity details a number of scenarios under which a user may withdraw their liquidity. The first two scenarios outline cases where the credit line has either been cancelled by the borrower or insufficient assets have been lent out to the pool b...
CVE-2021-39758
In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...
Honda's Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles
A duo of researchers has released a proof-of-concept PoC demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what's called a replay attack. The attack is made possible, thanks to a vulnerability in its remote keyless system...
