162 matches found
Linux kernel 安全漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Etherne...
Linux kernel 缓冲区错误漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A buffer overflow vulnerability exists in the sound/soc/qcom/sdm845.c soundwire device driver in Linux kernel 5.11.8...
PT-2021-2271 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.3 Description: An issue in the Linux kernel allows a kernel pointer leak, which can be used to determine the address of the iscsi transport structure. When an iSCSI transport is registered with the iSCSI...
PT-2021-11776 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11 Description: A NULL pointer dereference flaw may occur in the sco sock getsockopt function in net/bluetooth/sco.c due to the lack of a sanity check for a socket connection when using BT SNDMTU/BT RCVMTU for...
PT-2021-2559 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.3 Description: An issue was discovered in the Linux kernel when a webcam device exists, related to a memory leak in the video usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c for large arguments...
Apple Macos Server 跨站脚本漏洞
Apple Macos Server is a server-side version of the operating system from the American company Apple. An input validation error vulnerability exists in versions of macOS Server prior to 5.11, which stems from the handling of maliciously crafted URLs that could lead to open redirects or cross-site...
UBUNTU-CVE-2020-16120
Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unprivileged user to be copied to a...
CVE-2019-14894
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms...
Mattermost Server Input Validation Error Vulnerability (CNVD-2020-35438)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. An input validation error vulnerability exists in Mattermost Server versions prior to 5.11.0, which stems from the program failing to properly generate invitation IDs.No details of the vulnerability...
Interchange Cross-Site Scripting Vulnerability
Interchange is an e-commerce system. The system supports online ordering, real-time payment processing, product categorization and customer relationship management. A cross-site scripting vulnerability exists in the admin/help.html and admin/quicklinks.html pages of the admin help system in...
qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp...
qt5-qtbase: Double free in QXmlStreamReader
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...
PT-2022-8587
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 3.8.2 Moodle versions prior to 3.7.5 Moodle versions prior to 3.6.9 Moodle versions prior to 3.5.11 Description The issue allows users to view the grade history report without proper restrictions. Specifically, users...
Telegram Information Disclosure Vulnerability (CNVD-2019-32023)
Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in versions of Telegram prior to 5.11 based on the Android platform. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An...
Linux kernel null pointer dereference vulnerability (CNVD-2019-31655)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c in versions of Linux kernel prior to 5.0.11. The...
qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
PT-2019-19408 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.5.11 Description: A cross-site scripting XSS issue allows attackers to inject arbitrary web script or HTML via the xiwindow parameter. This could potentially lead to unauthorized actions on the affected system...
UBUNTU-CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...
PT-2018-2543 · Qt Company +5 · Qt +5
Name of the Vulnerable Software and Affected Versions: Qt versions prior to 5.11.3 Description: The issue is related to a buffer overflow in the QBmpHandler class of the Qt cross-platform framework, which can be exploited via BMP data. This could allow a remote attacker to cause a denial of servi...