9721 matches found
CLSA-2022-1650377052 Fix of CVE: CVE-2022-28390, CVE-2021-3609
can: emsusb: emsusbstartxmit: fix double devkfreeskb in error path ELSCVE-3847 CVE-2022-28390 - can: bcm: delay release of struct bcmop after synchronizercu ELSCVE-1694 CVE-2021-3609...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
Design/Logic Flaw
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-44504
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memc...
YottaDB缓冲区错误漏洞
YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in versions of YottaDB prior to r1.32, which could be exploited by attackers to control the size variables and buffers passed to memcpy calls to overwrite critical data structures and control the execution flow...
Malicious Package
Overview ldtzstxwzpntxqn is a malicious package. A copy-paste of the legitimate package npmi, used by the malicious package gxm-reference-web-auth-server and maintained by the same malicious actor. See gxm-reference-web-auth-server advisory for more information:...
Malicious Package
Overview lznfjbhurpjsqmr is a malicious package. A copy-paste of the legitimate package global-npm, used by the malicious package gxm-reference-web-auth-server and maintained by the same malicious actor. See gxm-reference-web-auth-server advisory for more information:...
The vulnerability of the AVI_ExtractSubtitle component of the VLC Media Player allows a hacker to gain access to confidential data and also trigger a service failure.
The vulnerability of the AVIExtractSubtitle component in the VLC Media Player media player is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause a service failure by using a...
kernel: failing usercopy allows for use-after-free exploitation
A use-after-free flaw was found in the Linux kernel’s vmwexecbufcopyfenceuser function in drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c in vmwgfx. This flaw allows a local attacker with user privileges to cause a privilege escalation problem...
Description of the security update for SharePoint Server 2019: April 12, 2022 (KB5002180)
None None...
The vulnerability of the Databuf function in the types.cpp component of the Exiv2 media metadata management library allows a attacker to cause a service failure.
The vulnerability of the Databuf function in the types.cpp component of the Exiv2 media metadata management library is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the set_fill function in the genge.c component of the Fig2dev file conversion utility allows a attacker to cause a service failure.
The vulnerability of the setfill function in the genge.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting the xfig file into the ge forma...
The vulnerability of the crc64i function in the nasmlib/crc64.c assembly file of NASM allows a hacker to cause a service failure.
The vulnerability of the crc64i function in the nasmlib/crc64.c assembly file of NASM involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the jsG_markobject function in the jsgc.c component of the JavaScript MuJS interpreter allows a attacker to cause a service failure.
The vulnerability of the jsGmarkobject function in the jspc.c component of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
UBUNTU-CVE-2022-1197
When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a...
The vulnerability of the stbl_AppendSize function in the MP4Box multimedia platform of GPAC allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the stblAppendSize function in the MP4Box multimedia platform of GPAC involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the set_color function in the genge.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.
The vulnerability of the setcolor function in the genge.c utility for converting .fig files in Fig2dev involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure by converting the xfig file into the ge format...
The vulnerability of the dwarf::line_table::line_table function in the ELF and DWARFv4 reading library of Libelfin allows a attacker to cause a service failure.
The vulnerability of the dwarf::linetable::linetable function in the ELF and DWARFv4 file reading library Libelfin is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the zepif_linkoutput() function in the lwIP protocol implementation allows a attacker to access confidential data.
The vulnerability of the zepiflinkoutput function in the lwIP protocol set is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data using a specially created 6LoWPAN packet...