CVE-2021-20321: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...

Important: kernel

Issue Overview: A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the...

CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...

The vulnerability of the Windows operating system’s kernel API allows a perpetrator to gain unauthorized access to modify, add, or delete data.

The vulnerability of the Windows operating system’s kernel API is related to errors in the FileObject structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to modify, add, or delete data...

PT-2020-6020

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in the structure of the File Object in the Windows operating system kernel API. Exploitation of this issue could allow an attacker to gain unauthorized access t...

Microsoft Windows - 'nt!NtQueryObject (ObjectNameInformation)' Kernel Pool Memory Disclosure

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1303&desc=2 We have discovered that the nt!NtQueryObject syscall handler discloses portions of uninitialized pool memory to user-mode clients when the following conditions are met: a It is invoked with the ObjectNameInformation...

Hyper-V hosts crash in csvfs.sys in Windows Server 2012 R2

Hyper-V hosts crash in csvfs.sys in Windows Server 2012 R2 Symptoms Windows Server 2012 R2 Hyper-V hosts may crash in the csvfs.sys file process when you perform backup with certain backup applications. Cause This issue occurs if a backup solution sends the CsvControlQueryFileRevision request on ...

CVE-2013-7060

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...

PYSEC-2014-65

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...

PYSEC-2014-67

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...

Design/Logic Flaw

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...

CVE-2013-7060

CVE-2013-7060 affects Plone 3.3–4.3.2 (CMFPlone/FactoryTool.py): an information disclosure allows remote attackers to obtain the installation path via a file object for unspecified documentation initialized at class scope. The connected sources (NVD, OSV, GHSA mirrors, Nessus notes) consistently ...

ESCMS vulnerability website system 0day-vulnerability warning-the black bar safety net

Version:ESCMS V1. 0 SP1 Build 1 1 2 5 Background login authentication is through the admin/check. asp achieved,look at the code % if Request. cookiesCookiesKey"ESadmin"="" then 'Note that here Oh,he is by COOKIE validation ESadmin is empty,we can forge a value,called he is not empty 'CookiesKey i...

Debian Security Advisory DSA 007-1 (zope)

The remote host is missing an update to zope announced via advisory DSA 007-1. OpenVAS Vulnerability Test $Id: deb0071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 007-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Buffer overflow

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895: Undefined Security Weakness

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...