Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/06/03 12:0 a.m.6 views

OP-TEE Trusted OS 资源管理错误漏洞

OP-TEE Trusted OS is an implementation of the OP-TEE open-source project, which creates an open-source Trusted Execution Environment TEE that utilizes Arm TrustZone technology. In versions 3.16.0 to 4.11.0 of OP-TEE Trusted OS, there was a resource management vulnerability. This vulnerability...

7.8CVSS5.3AI score0.00143EPSS
Exploits1References1
CVE
CVE
added 2026/04/08 1:32 p.m.123 views

CVE-2026-5795

In Eclipse Jetty, the JASPIAuthenticator initializes authentication checks that set two ThreadLocal variables. After returning from these initial checks, the code may take an early return path without clearing the ThreadLocals. A subsequent request that executes on the same thread inherits these ...

7.4CVSS6AI score0.00377EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/06/18 10:15 a.m.0 views

UBUNTU-CVE-2025-38067

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseqcs is non-zero The rseqcs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault ...

5.5CVSS6.2AI score0.00467EPSS
Exploits0References37
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.3 views

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a resource management error vulnerability that stems from the fact that HTTP2 session objects may be reused when released on a different thread, leading to memory corruptio...

8.8CVSS8.1AI score0.0111EPSS
Exploits0References15
RedHat Linux
RedHat Linux
added 2019/05/09 6:14 p.m.4 views

wildfly: wrong SecurityIdentity for EE concurrency threads that are reused

It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem stores a SecurityIdentity to run the thread with that security identity. As these threads do not necessarily terminate if the 'keep alive' time has not expired, this could allow a shared thread to use the wrong securit...

8.8CVSS5.8AI score0.01509EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/05/08 12:9 p.m.3 views

wildfly: wrong SecurityIdentity for EE concurrency threads that are reused

It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem stores a SecurityIdentity to run the thread with that security identity. As these threads do not necessarily terminate if the 'keep alive' time has not expired, this could allow a shared thread to use the wrong securit...

8.8CVSS5.8AI score0.01509EPSS
Exploits0References4
Rows per page
Query Builder