775 matches found
CVE-2019-14033
Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096,...
PVS Detach and Attach Write Cache Disk Drive Letter Changed
Detach and attach write cache disk,TD drive letter changes...
CVE-2019-10516
CVE-2019-10516 is described as multiple read overflows in MM during decoding of service accept/reject and MT detach, affecting a broad list of Qualcomm Snapdragon platforms (e.g., APQ8009, APQ8017, SDM4xx, SM8x, SXR1130, and other Snapdragon lines). Root cause: read overflow in MM when decoding s...
WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed
WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed VULNERABILITY DETAILS HTMLFrameElementBase.cpp: bool HTMLFrameElementBase::isURLAllowed const if mURL.isEmpty // 4 return true; return isURLAlloweddocument.completeURLmURL; bool HTMLFrameElementBase::isURLAllowedconst URL& completeURL...
Linux kernel resource management error vulnerability (CNVD-2019-31640)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'rsimac80211detach' function in the drivers/net/wireless/rsi/rsi91xmac80211.c file in versions of Linux kernel...
DEBIAN-CVE-2018-21008
An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsimac80211detach in the file drivers/net/wireless/rsi/rsi91xmac80211.c...
UBUNTU-CVE-2018-21008
An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsimac80211detach in the file drivers/net/wireless/rsi/rsi91xmac80211.c...
The vulnerability of the Linux operating system’s avma1cs_detach kernel driver allows a hacker to trigger a service failure.
The vulnerability of the driver/module in Linux operating systems, specifically the drivers/isdn/hisax/avma1cs.ko module, stems from memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure by disconnecting the PCMCIA device that emulates the AVM A1...
CVE-2018-11947
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...
CVE-2018-11947
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...
CVE-2016-9592
The CVE-2016-9592 entry describes a denial-of-service risk in OpenShift before versions 3.3.1.11, 3.2.1.23, and 3.4. The root cause is a flaw where a volume fails to detach, causing the delete operation to fail with a VolumeInUse error. Because the delete operation is retried every 30 seconds for...
USN-3619-1: Linux kernel vulnerabilities
Jann Horn discovered that the Berkeley Packet Filter BPF implementation in the Linux kernel improperly performed sign extension in some situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-16995 It was discovered that a...
UBUNTU-CVE-2017-18191
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. The same code error...
PT-2018-6722
Name of the Vulnerable Software and Affected Versions: OpenStack Nova versions 15.x through 15.1.0 OpenStack Nova versions 16.x through 16.1.1 Description: An issue in OpenStack Nova allows an attacker to access the underlying raw volume and corrupt the LUKS header by detaching and reattaching an...
Microsoft Internet Explorer 10 MSHTML - CEditAdorner::Detach Use-After-Free (MS13-047) Exploit
Exploit for windows platform in category dos / poc var oWindow = window.open"window.xhtml"; setIntervalfunction try oWindow.eval"" + function document.designMode = "on"; document.execCommand"SelectAll"; var oSelection = window.getSelection; oSelection.collapsedocument,1;...
Microsoft Internet Explorer 10 - MSHTML CEditAdorner::Detach Use-After-Free (MS13-047)
Microsoft Internet Explorer 10 - MSHTML CEditAdorner::Detach Use-After-Free MS13-047 var oWindow = window.open"window.xhtml"; setIntervalfunction try oWindow.eval"" + function document.designMode = "on"; document.execCommand"SelectAll"; var oSelection = window.getSelection;...
Microsoft Internet Explorer 10 - MSHTML 'CEditAdorner::Detach' Use-After-Free (MS13-047)
var oWindow = window.open"window.xhtml"; setIntervalfunction try oWindow.eval"" + function document.designMode = "on"; document.execCommand"SelectAll"; var oSelection = window.getSelection; oSelection.collapsedocument,1; document.execCommand"InsertImage", false;...
UBUNTU-CVE-2015-8962
Double free vulnerability in the sgcommonwrite function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service memory corruption and system crash by detaching a device during an SGIO ioctl call...
Name of Backups Entry Does Not Match Job Name
Challenge The name of the backup job has been changed, causing entries found under the Backups node to no longer match their associated job. In the example screenshot above, the job was first run with the name "Backup Job 1," and after the initial run, the job was renamed to "DC Backup." The...
CVE-2016-1711
WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...