CVE-2021-21791

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21790

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21790

The CVE-2021-21790 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220: a flaw in the driver’s handling of Privileged I/O read requests allows a local attacker to trigger privileged reads from the kernel via crafted IRPs, potentially disclosing sensitive kernel data. TALOS details cover C...

FreeBSD : tomcat -- Remote Denial of Service in multiple versions (cc7c85d9-f30a-11eb-b12b-fc4dd43e2b6a)

rbeaudry reports : A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. Th...

CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

Command Execution Vulnerability in I Doc View Online Document Preview System

I Doc View Online Document Preview is an online document preview system. A command execution vulnerability exists in I Doc View Online Document Preview that can be exploited by an attacker to execute arbitrary commands...

Virtuozzo Hybrid Infrastructure 4.6 Update 1

This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-45315 The MDS service may be unstable under a high load condition. Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands in the iSCSI kernel module. Vulnerabilit...

SAP NetWeaver AS Missing Authorization Check (3059446)

A missing authorization check vulnerability exists in the Administration Workset of the SAP NetWeaver Guided Procedures versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. An authenticated, remote attacker can exploit this, to escalate privileges and allow an unauthorized user the ability to...

Logging: A Deep Dive

Our RASP product At Imperva our team builds a product called RASP which stands for Runtime Application Self Protection. As indicated by the name, it is a security product which plugs directly into the runtime of an application in order to provide a similar and complementary set of capabilities as...

CVE-2020-19497

CVE-2020-19497 concerns an integer overflow in the MAT File I/O library matio, specifically in Mat_VarReadNextInfo5 within the source file mat5.c, affecting version 1.5.17. The vulnerability is described as allowing a Denial of Service and possibly other unspecified impacts. The provided connecte...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error in Model I/O. A remote attacker can exploit the vulnerability to create a specially crafted file, trick a victim into opening it,...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that originates from a boundary error when handling untrustworthy input in Model I/O. A remote attacker can exploit the vulnerability to create a specially crafte...

CVE-2020-36428

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4...

CVE-2020-36428

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4...

CVE-2020-36428

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4...

CVE-2021-36977

CVE-2021-36977 affects matio (MAT File I/O Library) 1.5.20 and 1.5.21, with a heap-based buffer overflow in H5MM_memcpy called from H5MM_malloc and H5C_load_entry, related to using HDF5 1.12.0. Impact details are provided across multiple advisories. Remediation available: upgrade matio to a newer...

CVE-2020-36428

CVE-2020-36428 affects matio (MAT File I/O Library) versions 1.5.18–1.5.21, with a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). Multiple connected advisories confirm practical impact and remediation paths. Debian notes a fix in libmatio 1.5.19-2+...

Buildah processes using chroot isolation may leak environment values to intermediate processes

Impact When running processes using "chroot" isolation, the process being run can examine the environment variables of its immediate parent and grandparent processes CVE-2021-3602. This isolation type is often used when running buildah in unprivileged containers, and it is often used to do so in...

Apache Tomcat DoS Vulnerability (Jul 2021) - Linux

Apache Tomcat is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...