156 matches found
The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.
The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.
The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
Red Hat stackrox 安全漏洞
Red Hat stackrox is a full lifecycle Kubernetes security solution from Red Hat. It allows you to detect, manage, and mitigate security risks, such as misconfigurations, and vulnerabilities CVEs. A security vulnerability exists in Red Hat stackrox that stems from improper stackrox cleanup. An...
PT-2022-29422
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the btrfs filesystem in the Linux Kernel, where a repair bio is not properly cleaned up if its submission fails. This is an automated ID intended to aid in the discover...
GitLab Enterprise Edition 跨站脚本漏洞
GitLab Enterprise Edition is a content management system. A cross-site scripting vulnerability exists in GitLab Enterprise Edition versions 14.4.0 through 14.9.1 that stems from insufficient cleanup of user-supplied data in comments. A remote user can exploit this vulnerability to inject and...
iPack SCADA Automation software SQL注入漏洞
iPack SCADA Automation software is used by the Turkish company iPack to enable tracking and management of data from remote points and to intervene in the system. The SQL injection vulnerability in iPack SCADA Automation software stems from improper cleanup. iPack SCADA Automation software is...
ImageMagick 资源管理错误漏洞
ImageMagick is used to create, edit, composite, or convert digital images.A resource management error vulnerability exists in ImageMagick, which stems from a failure to properly clean up the conversion process before invoking it with certain inputs. An attacker could exploit this vulnerability to...
WordPress SQL注入漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress plugin The Stock in & out 1.0.4 and earlier...
The vulnerability of Trend Micro’s Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) lies in improper resource cleanup or release mechanisms. This allows attackers to cause the software to crash or fail to perform its functions.
The vulnerability of Trend Micro’s Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE lies in improper resource cleanup or release. Exploiting this vulnerability can allow an attacker to cause the software to crash or experience service failures due to a specially created file...
PT-2021-9252
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a use after free problem that occurs when importing a DMA buffer using the CPU address of the buffer. This happens because the attachment is not properly...
CVE-2020-0203
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2020-0203
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
The vulnerability of the ClamAV antivirus software allows a hacker to trigger a service failure.
The vulnerability of the ClamAV antivirus software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted messages to the vulnerable system...
CVE-2017-9658: Improper Handling of Exceptional Conditions
Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this...
CVE-2017-9657: Improper Cleanup on Thrown Exception
Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...
ICSMA-17-255-01_Philips' IntelliView MX40 Patient Worn Monitor (WLAN) Vulnerabilities
OVERVIEW Philips has identified two vulnerabilities in Philips’ IntelliView MX40 Patient Worn Monitor for use with wireless local area networks WLANs. Philips has produced a software update that fixes one of the identified vulnerabilities and provides mitigations for the other vulnerability...