Lucene search
+L

2403 matches found

OSV
OSV
•added 2021/06/25 3:15 p.m.•13 views

CVE-2021-34184

Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in madefaultvfsclosestdio in miniaudio.h...

9.8CVSS6.1AI score0.01146EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/06/25 12:00 a.m.•3 views

PT-2021-20395

Name of the Vulnerable Software and Affected Versions: Miniaudio version 0.10.35 Description: The issue is related to a Double free vulnerability that could cause a buffer overflow in the ma default vfs close stdio function in miniaudio.h. Recommendations: For Miniaudio version 0.10.35, at the...

9.8CVSS0.01146EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/06/17 12:00 a.m.•14 views

PT-2024-11245

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been resolved in the Linux kernel. The issue was caused by a missing free netdev call in the mkiss close function, which led to a memory leak when the mki...

5.5CVSS6.6AI score0.00226EPSS
SaveExploits0
OSV
OSV
•added 2021/06/16 1:15 p.m.•13 views

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

9.8CVSS5.8AI score0.0125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/16 12:00 a.m.•16 views

PT-2024-11246 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak vulnerability has been resolved in the Linux kernel. The issue is related to the ip mc add1 src function, where an unreferenced object is created, leading to a memory lea...

9.8CVSS6AI score0.01358EPSS
SaveExploits7References456
osv-debian
osv-debian
•added 2021/06/07 12:15 p.m.•7 views

DEBIAN-CVE-2020-36385

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctxlist in some ucmamigrateid situations where ucmaclose is called, aka CID-f5449e74802c...

7.8CVSS6.5AI score0.01476EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2021/06/07 12:15 p.m.•13 views

UBUNTU-CVE-2020-36385

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctxlist in some ucmamigrateid situations where ucmaclose is called, aka CID-f5449e74802c...

7.8CVSS6.7AI score0.01476EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2021/06/03 12:00 a.m.•3 views

PT-2021-28293

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as FuzzedFileProvider::seek, IO do write, and IO file close...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/17 12:00 a.m.•22 views

PT-2021-8256 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in AP/VLAN handling. When AP VLAN interfaces are up and the AP interface they belong to is closed, a deadlock occurs because the wiphy mutex is held...

5.5CVSS6.4AI score0.00147EPSS
SaveExploits0References14
osv-debian
osv-debian
•added 2021/05/06 1:15 p.m.•10 views

DEBIAN-CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References1
Mend
Mend
•added 2021/05/06 3:33 a.m.•7 views

CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

8.5CVSS0.00395EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•10 views

CVE-2020-28012: Undefined Security Weakness

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References1
Veracode
Veracode
•added 2021/05/04 10:33 p.m.•39 views

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists when allowfilter is true, using a missing close-on-exec flag for a privileged pipe...

7.8CVSS7.7AI score0.00395EPSS
SaveExploits1References2Affected Software7
UbuntuCve
UbuntuCve
•added 2021/05/04 1:30 p.m.•45 views

CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References3
osv-ubuntu
osv-ubuntu
•added 2021/05/04 1:30 p.m.•16 views

UBUNTU-CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2021/03/16 1:57 p.m.•14 views

kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c

A use-after-free flaw was found in the Linux kernel’s GPU driver functionality when destroying GEM context. A local user could use this flaw to crash the system or potentially escalate their privileges...

7.8CVSS6.7AI score0.00617EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/03/11 12:00 a.m.•61 views

Samsung keyboard access control error vulnerability

Samsung keyboard is a cell phone application from Samsung South Korea. It provides an input function. A security vulnerability exists in Samsung keyboard version prior to SMR Feb-2021 Release 1, which allows a close-range attacker to change arbitrary settings during the initialization state. No...

5.1CVSS6.9AI score0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/04 12:00 a.m.•23 views

SAMSUNG keyboard 安全漏洞

Samsung keyboard is a cell phone application from Samsung South Korea. It provides an input function. A security vulnerability exists in Samsung keyboard version prior to SMR Feb-2021 Release 1, which allows a close-range attacker to change arbitrary settings during the initialization state. No...

5.1CVSS5.8AI score0.00124EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/02/18 12:00 a.m.•3 views

PT-2021-28097

Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description The issue is related to a crash type of UNKNOWN WRITE. The crash state includes functions such as sudo user free and sudoers policy close, which are located in the fuzz policy.c file...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/18 12:00 a.m.•1 views

PT-2021-28098

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as us socket close, wrap epoll wait, and us loop run...

5.7AI score
SaveExploits0References2
Rows per page
Query Builder