108 matches found
go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path which causes a memory leak aka CID-9453264ef586.
...
DEBIAN-CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
DEBIAN-CVE-2019-20810
go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586...
Design/Logic Flaw
go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586...
DEBIAN-CVE-2020-12770
An issue was discovered in the Linux kernel through 5.6.11. sgwrite lacks an sgremoverequest call in a certain failure case, aka CID-83c6f2390040...
CVE-2020-5961
NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service...
The vulnerability of the “_failure_path” data input field on the software platform for developing and managing web applications in Symfony allows a perpetrator to gain unauthorized access to information or execute arbitrary code.
The vulnerability of the “failurepath” data input field on the software platform for developing and managing web applications in Symfony involves redirecting to an unauthorized website. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information or execute...
DEBIAN-CVE-2018-19790
An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the failurepath input field of login forms, an attacker can work around the redirection target restrictio...