PT-2021-28540

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.12.2 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-24586

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.3 Description The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-24546

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.12.2 Description: A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven...

PT-2021-24620

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2021-32541

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services...

CVE-2021-32541

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services...

CVE-2021-32541

CVE-2021-32541: A vulnerability in the CTS Web transaction system’s authentication and session management allows remote unauthenticated actors to flood with valid usernames and force logged-in users to log out, potentially denying access to services. The issue is tied to an incorrect implementati...

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. The CTS Web transaction system suffers from an authorization issue vulnerability that stems from an incorrect implementation of the CTS Web transaction system related to authentication and...

CTS Web transaction system 跨站脚本漏洞

The CTS Web transaction system is a CTS Web transaction system from Taiwan's Cascade Information Corporation. A cross-site scripting vulnerability exists in the CTS Web transaction system, which stems from the fact that the specific functional parameters of the transaction system do not filter...

PT-2021-19766

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system affected versions not specified Description: The issue is related to incorrect implementation of authentication and session management in the CTS Web transaction system. This allows remote unauthenticated attackers ...

CVE-2021-32543: Improper Authentication

The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity...

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. An authorization issue vulnerability exists in the CTS Web transaction system, which stems from an incorrect implementation of authentication-related functionality in the transaction system. A...

PT-2021-19768

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system affected versions not specified Description: The issue is related to incorrect implementation of authentication management in the CTS Web transaction system. After a user logs in, remote attackers can manipulate...

PT-2024-11202 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the i2c-i801 driver in the Linux kernel, which supports interrupts. When the KILL bit is set to recover from a timed out transaction, it triggers an interrupt...

glibc security, bug fix, and enhancement update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...

unused return value from transferfrom() function

Handle JMukesh Vulnerability details Impact by utilizing the return values we are ensuring that transaction is successfully executed if not it emit reason for failing Proof of Concept Tools Used manual review Recommended Mitigation Steps utilize the return value --- The text was updated...

CVE-2021-31876

Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes it easier for attackers to trigger a loss of funds, or a denial of service attack against downstream projects such as Lightning network nodes. An unconfirmed child transaction wi...

CVE-2021-31876

Removed by vendor...

Security Bulletin: Vulnerability in WebSphere Application Server Liberty affects IBM Financial Transaction Manager for RedHat OpenShift (CVE-2020-5258)

Summary Dojo vulnerability in WebSphere Application Server Liberty affects IBM Financial Transaction Manager for RedHat OpenShift. Vulnerability Details CVEID: CVE-2020-5258 DESCRIPTION: Dojo dojo could allow a remote attacker to inject arbitrary code on the system, caused by a prototype pollutio...