Lucene search
+L

1969 matches found

OSV
OSV
added 2021/10/19 7:15 p.m.7 views

CVE-2021-31364

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon flowd of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traff...

5.9CVSS6.2AI score0.00639EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/07 3:15 p.m.5 views

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

8.1CVSS7.2AI score0.00937EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.6 views

The vulnerability of the Linux kernel driver in Nitro Enclaves, related to pointer arithmetic errors, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.00301EPSS
SaveExploits0References5Affected Software2
Redos
Redos
added 2021/09/08 12:0 a.m.12 views

ROS-2-1410

2.1410 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS9.1AI score0.99295EPSS
SaveExploits89
OpenVAS
OpenVAS
added 2021/08/25 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2021:2824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.36453EPSS
SaveExploits3References2
FreeBSD
FreeBSD
added 2021/07/29 12:0 a.m.31 views

Node.js -- July 2021 Security Releases (2)

Node.js reports: Use after free on close http2 on stream canceling High CVE-2021-22930 Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior...

9.8CVSS0.9AI score0.36453EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/30 12:36 a.m.15 views

GSD-2021-1001058 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:31 a.m.11 views

UVI-2021-1000979 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:31 a.m.11 views

GSD-2021-1000979 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:24 a.m.14 views

GSD-2021-1000917 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/25 3:15 p.m.5 views

CVE-2021-34184

Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in madefaultvfsclosestdio in miniaudio.h...

9.8CVSS6.1AI score0.01146EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2021/06/17 12:0 a.m.9 views

PT-2024-11245

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been resolved in the Linux kernel. The issue was caused by a missing free netdev call in the mkiss close function, which led to a memory leak when the mki...

5.5CVSS6.6AI score0.00226EPSS
SaveExploits0
OSV
OSV
added 2021/06/16 1:15 p.m.6 views

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

9.8CVSS5.8AI score0.0125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/06/16 12:0 a.m.9 views

PT-2024-11246 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak vulnerability has been resolved in the Linux kernel. The issue is related to the ip mc add1 src function, where an unreferenced object is created, leading to a memory lea...

9.8CVSS6.4AI score0.01358EPSS
SaveExploits6References456
OSV
OSV
added 2021/06/07 12:15 p.m.2 views

DEBIAN-CVE-2020-36385

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctxlist in some ucmamigrateid situations where ucmaclose is called, aka CID-f5449e74802c...

7.8CVSS6.5AI score0.01476EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/07 12:15 p.m.5 views

UBUNTU-CVE-2020-36385

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctxlist in some ucmamigrateid situations where ucmaclose is called, aka CID-f5449e74802c...

7.8CVSS6.7AI score0.01476EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2021/05/17 12:0 a.m.11 views

PT-2021-8256 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in AP/VLAN handling. When AP VLAN interfaces are up and the AP interface they belong to is closed, a deadlock occurs because the wiphy mutex is held...

5.5CVSS6.4AI score0.00147EPSS
SaveExploits0References14
OSV
OSV
added 2021/05/06 1:15 p.m.2 views

DEBIAN-CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS7.6AI score0.00395EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/05/04 10:33 p.m.33 views

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists when allowfilter is true, using a missing close-on-exec flag for a privileged pipe...

7.8CVSS2.6AI score0.00395EPSS
SaveExploits1References2Affected Software7
OSV
OSV
added 2021/05/04 1:30 p.m.6 views

UBUNTU-CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS6.9AI score0.00395EPSS
SaveExploits1References4
Rows per page
Query Builder