Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Intel PROSet/Wireless WiFi Software 安全漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 22.120 and KillerTM WiFi versions prior to 3.1122.1105, which stems from incorrect initialization and could...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur, the operating system used by Apple for the MAC operating system macOS. Apple macOS Big Sur suffers from a security vulnerability that originates from a CVMS initialization error. An attacker can exploit the vulnerability to...

FIS GT.M 代码问题漏洞

FIS GT.M is a database platform. A denial of service vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from the fincr function in srport/fincr.c incorrectly initializing the type and the presence of a NULL pointer dereference, which can be exploited by an attacker to cause ...

CVE-2021-39718

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

Interactive Graphical SCADA System Data Server 安全漏洞

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. An initialization error vulnerability exists in the Schneider Electric Interactive Graphical...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from an incorrect initialization,...

Intel Graphics Drivers 安全漏洞

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. A security vulnerability exists in Intel Graphics Driver for Windows, which is due to an initialization error. A local user can run a specially designed application to execute arbitrary code on the system using...

USN-4948-1: Linux kernel (OEM) vulnerabilities

Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9215)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9215 advisory. - btrfs: fix race when cloning extent buffer during rewind of an old root Filipe Manana Orabug: 32669454 CVE-2021-28964 - xen-blkback: don't leak...

".NET Framework Initialization Error" on Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If a computer has .NET Framework version 4 installed and there are no older versions of the .NET...

PT-2024-11146 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the crypto: qat module in the Linux kernel, where the ADF STATUS PF RUNNING flag is set after adf dev init. However, the vf2pf lock is initialized in adf dev...

UBUNTU-CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process...

CVE-2020-0586

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

The vulnerability of the Astra Linux Directory Service’s EPPT management system, related to improper data processing, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an initialization processing error. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1479)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the XNU kernel of iOS, Mac OS, and TV OS allows attackers to perform unauthorized changes to the memory shared among processes.

The vulnerability of the XNU-based operating systems such as iOS, Mac OS, and TV OS is related to errors in the memory initialization mechanism. Exploiting this vulnerability allows an attacker to perform unauthorized changes to the memory shared among processes, using specially crafted executabl...

The vulnerability of the i5100_init_one handler in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the i5100initone implementation drivers/edac/i5100edac.ko in the Linux kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure by disabling ADDI-DATA GmbH communication cards with the identifier PCIDEVICEIDINTEL510019...

Design/Logic Flaw

aareadheader in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables...