Code injection

In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c...

CVE-2017-18379

In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c...

CVE-2017-18379

In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c...

CVE-2017-18379

In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c...

CVE-2017-18379

CVE-2017-18379 is an issue in the Linux kernel prior to 4.14, where an out-of-bounds access occurs in the nvme target driver, specifically in drivers/nvme/target/fc.c. The connected Nessus advisories (Unity Linux UTSA-2026-001233/002545/002935) reference the same vulnerability and reiterate that ...

[SECURITY] [DLA 1730-3] libssh2 regression update

Package : libssh2 Version : 1.4.3-4.1+deb8u4 CVE ID : CVE-2019-3859 CVE-2019-13115 Various security problems have been additionally fixed in libssh2, an SSH client implementation written in C++. CVE-2019-3859 While investigating the impact of CVE-2019-13115 in Debian jessies version of libssh2, i...

Cherokee Web Server Buffer Overflow Vulnerability

Cherokee Web Server is a web server for highly concurrent web applications. A buffer overflow vulnerability exists in Cherokee Web Server versions 1.2.103 and earlier. The vulnerability originates when a web system or product performs an operation in memory without properly validating data...

Libslax Buffer Overflow Vulnerability

libslax is an open source implementation of the SLAX language . A buffer overflow vulnerability exists in the slaxlexer.c file in libslax. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

Eclipse OpenJ9 Buffer Overflow Vulnerability (CNVD-2019-39187)

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A buffer overflow vulnerability exists in Eclipse OpenJ9 versions prior to 0.15. The vulnerability stems from a networked system or product that performs operations in...

Microsoft Windows 10 1903/1809 RPCSS Activation Kernel Security Callback Privilege Escalation

Exploit for windows platform in category local exploits Microsoft Windows 10 1903/1809 - RPCSS Activation Kernel Security Callback Privilege Escalation Windows: RPCSS Activation Kernel Security Callback EoP Platform: Windows 10 1903/1809 not tested earlier Class: Elevation of Privilege Security...

Jenkins Multiple Security Vulnerabilities

Description Jenkins is prone to the following vulnerabilities: 1. A unauthorized-access vulnerability 2. A cross-site request forgery vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of the victim in the context of the affected site, steal...

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-22865)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

nfdump buffer overflow vulnerability

nfdump is an open source tool for collecting and processing netflow data. A buffer overflow vulnerability exists in nfdump version 1.6.16 and earlier. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

Memory corruption

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

CVE-2019-1010292

CVE-2019-1010292 affects Linaro/OP-TEE OP-TEE (optee_os). The vulnerability is in boundary checks, which could lead to corruption of any memory the TA can access. Impact: memory corruption within TA-accessible memory. Fixed in: v3.4.0. CVSS (NVD v3.0): 9.8 (CRITICAL), network-attack vector, low c...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

Oracle Communications Billing and Revenue Management CVE-2019-12086 Remote Security Vulnerability

Description Oracle Communications Billing and Revenue Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Billing Care' and 'Business Operations Center jackson-databind' components are affected. This vulnerability affects the...