CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

CVE-2020-36434: Double Free

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

CVE-2021-26998

CVE-2021-26998 affects NetApp Cloud Manager prior to 3.9.9, where a flaw allows sensitive information in logs to be exposed to authenticated users. Public sources consistently identify the affected product and version range and confirm the impact as information disclosure. Remediation per the doc...

Chromium: CVE-2021-30594 Use after free in Page Info UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2021-3681

A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the buildignore list in "galaxy.yml" include files in the .tar.gz file. This contains sensitive info, such as the user's Ansible Galaxy A...

FreeBSD : chromium -- multiple vulnerabilities (c3c6c4a3-f47d-11eb-b632-3065ec8fd3ec)

Chrome Releases reports : This release contains 10 security fixes, including : - 1227777 High CVE-2021-30590: Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-09 - 1229298 High CVE-2021-30591: Use after free in File System API. Reported by...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Container Platform for Windows Containers 3.0.0 security and bug fix update

The components for Red Hat OpenShift Container Platform for Windows Containers 3.0.0 are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2021-33330

Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing CORS protected resources if the user is only authenticated using the portal session authentication, which allows remote attackers to obtain sensitive information including the...

PT-2021-29723

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.53 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29935

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.277 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.241 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25841

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue concerns the validation of lwtstate-data in the skb tunnel info function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2021-29613

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.5 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25618

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.5 Description: The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-29785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.135 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25728

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.53 Description The issue concerns the validation of lwtstate-data in the skb tunnel info function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2021-25909

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.277 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29836

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue concerns the validation of lwtstate-data in the skb tunnel info function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2021-25940

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.277 Description The issue is related to the validation of lwtstate-data in the skb tunnel info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...