SUSE CVE-2020-6805

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...

SUSE CVE-2021-45710

An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption...

PT-2023-35257

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.165 Description The issue is related to the Bluetooth hci qca driver shutdown on closed serdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-35059 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the Bluetooth driver shutdown on closed serdev in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

Race condition

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...

CVE-2022-46285

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...

K64505405: NTP vulnerability CVE-2016-4956

Security Advisory Description ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548. CVE-2016-4956 Impact In...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from an input validation error vulnerability that stems from an issue with a Qualcomm closed-source component...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

WordPress Export Users With Meta plugin <= 0.6.8 - Auth. CSV Injection vulnerability

Auth. CSV Injection vulnerability discovered by Mika Patchstack Alliance in the WordPress Export Users With Meta plugin versions = 0.6.8. Solution No patched version is available. This plugin has been closed as of November 14, 2022 and is not available for download. This closure is temporary,...

WordPress OAuth Client by DigitialPixies plugin <= 1.1.0 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Lana Codes in WordPress OAuth Client by DigitialPixies plugin versions = 1.1.0. Solution No patched version is available. This plugin has been closed as of October 21, 2022 and is not available for download. This closure is...

Upgraded Q -> M from #272 [1668215320788]

Judge has assessed an item in Issue 272 as M risk. The relevant finding follows: Inaccurate comment can be misleading. The following retrievePledgeRewards function is for retrieving the non-distributed rewards from an expired pledge, not just a closed pledge. Calling this function for a pledge th...