JTEKT TOYOPUC products

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: JTEKT Corporation Equipment: TOYOPUC products Vulnerability: Improper Resource Shutdown or Release 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized user to...

CVE-2013-1055: Improper Resource Shutdown or Release

The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was...

CVE-2013-1054: Improper Resource Shutdown or Release

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus...

CVE-2020-9206

The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be...

PT-2021-12842

Name of the Vulnerable Software and Affected Versions: eUDC660 affected versions not specified Description: The issue is related to improper resource management, allowing an attacker with high privilege to perform specific operations and exploit the vulnerability. This can result in the key file...

CVE-2021-26906: Improper Resource Shutdown or Release

An issue was discovered in respjsipsession.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash...

Unspecified Vulnerability in JetBrains YouTrack

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack that stems from doing improper resourc...

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

CVE-2021-25766

CVE-2021-25766 affects JetBrains YouTrack prior to version 2020.4.4701, due to improper resource access checks in YouTrack (JT-59397). The issue was addressed in JetBrains’ Security Bulletin Q4 2020, with a fix in 2020.4.4701. The Red Hat/NVD entries corroborate the same description. No exploitat...

CVE-2021-25766: Undefined Security Weakness

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

PT-2021-16778

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.4.4701 Description The issue is related to improper resource access checks. Recommendations For versions prior to 2020.4.4701, update to version 2020.4.4701 or later to resolve the issue...

Jetbrains JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack that stems from doing improper resourc...

Red Lion Crimson 3.1

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Red Lion Equipment: Crimson 3.1 Vulnerabilities: NULL Pointer Dereference, Missing Authentication for Critical Function, Improper Resource Shutdown or Release 2. RISK EVALUATION Successful...

CVE-2020-16233: Improper Resource Shutdown or Release

An attacker could send a specially crafted packet that could have CodeMeter All versions prior to 7.10 send back packets containing data from the heap...

CVE-2020-9104: Missing Release of Memory after Effective Lifetime

HUAWEI P30 smartphones with Versions earlier than 10.1.0.123C431E22R2P5,Versions earlier than 10.1.0.123C432E22R2P5,Versions earlier than 10.1.0.126C10E7R5P1,Versions earlier than 10.1.0.126C185E4R7P1,Versions earlier than 10.1.0.126C461E7R3P1,Versions earlier than 10.1.0.126C605E19R1P3,Versions...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Exploit for Improper Resource Shutdown or Release in Microsoft

Web-Security-Note Record some common Web security sites 由于平常读过的文章以及遇到的比较好的开源项目都被渐渐遗忘了，所以利用这个项目来记录一下，以便查阅。 目录： - CTF - Online-Tools - 漏洞环境 - 信息搜集 - 工具 - 面经 - BypassWAF - WEB安全 - 漏洞挖掘 - 渗透测试 - 内网渗透 - 扫描器开发 - 开发 - 运维 CTF + CTF Time + Pwnhub + CTF论剑场 + 南京邮电大学CTF平台 + Whale CTF + JarvisOJ + Hackme CTF ...

CVE-2020-14630: Improper Resource Shutdown or Release

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications component: File Upload. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

The vulnerability of the FreeRDP remote desktop protocol lies in the fact that resources are not released after their useful life has ended. This allows a malicious actor to cause service failures.

The vulnerability of the FreeRDPr remote desktop protocol implementation is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a malicious actor to cause service failures...