1628 matches found
CVE-2023-0643
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2022-45101
Dell PowerScale OneFS 9.0.0.x–9.4.0.x is affected by an NFS flaw described as Improper Handling of Insufficient Privileges, enabling a remote unauthenticated attacker to potentially cause information disclosure and remote code execution. The issue is tied to the NFS handling path and root cause i...
The vulnerability of the Linux operating system’s kernel network interface layer allows a hacker to bypass the network interface layer.
The vulnerability of the Linux operating system’s kernel network firewall is related to improper handling and processing of messages. Exploiting this vulnerability can allow an attacker to bypass network firewall restrictions...
CVE-2022-39380
Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...
CVE-2022-39380
CVE-2022-39380 affects the Wire web-app. Prior to 2022-11-02, certain Markdown formats can trigger an unhandled error during HTML rendering, causing DoS-like symptom where the affected chat history cannot be displayed. The issue is fixed in version 2022-11-02 and deployed on Wire managed services...
CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering
Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...
The vulnerability of the scsi_ioctl function (drivers/scsi/scsi_ioctl.c) in the Linux operating system, which allows a hacker to increase their privileges
The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the improper handling of SCSI device classes during SCSI command authorization. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability in the implementation of the SSH network protocol for Cisco IOS and Cisco IOS XE operating systems allows a hacker to cause a service failure.
The vulnerability of the SSH network protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
PT-2023-34089 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential security issue exists due to the improper handling of the q vector. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...
CVE-2022-41721 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c
A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be...
USN-5795-1 net-snmp vulnerabilities
It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause Net-SNMP to crash, resulting in a denial of service...
Design/Logic Flaw
Information exposure in DSP services due to improper handling of freeing memory...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1134)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-25722
CVE-2022-25722 describes information exposure in DSP services due to improper handling of freeing memory. Affected: DSP-related components (Qualcomm/DP S services) as per CVE entry and Android Pixel bulletin referencing this CVE under Qualcomm kernel subcomponent. Root cause: improper memory mana...
Privilege Escalation
github.com/usememos/memos is vulnerable to privilege escalation. Improper handling of insufficient permissions and privileges allows remote attackers to elevate privileges...
express-param vulnerable to Improper Handling of Extra Parameters
A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...
CVE-2017-20160 flitto express-param fetchParams.js parameter pollution
A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...
GHSA-6WHJ-8G9G-5JVX usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4863 Improper Handling of Insufficient Permissions or Privileges in usememos/memos
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...