CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path...

Apache Commons IO 路径遍历漏洞

Apache Commons IO is an application from the American Apache Foundation Apache Inc. It can help develop IO functionality. A path traversal vulnerability exists in Apache Commons IO versions 2.2 through 2.6. The vulnerability is related to the FileNameUtils.normalize method. An attacker can exploi...

PT-2022-2644 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.4.189 Description: The issue is related to an integer overflow in the io uring interface of the Linux Kernel, which can be exploited by a local attacker to cause memory corruption and escalate privileges to th...

CVE-2021-28686

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl...

Input validation

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1892

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking...

Denial Of Service (DoS)

jetty-io is vulnerable to denial of service. An attacker is able to send a large TLS frame with data length of more than 17408, resulting in high CPU consumption and a potential application crash...

Hitachi Energy Relion 670, 650 and SAM600-IO

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670, 650, and SAM600-IO Vulnerabilities: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

CVE-2021-27196

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 TEGO1, MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce th...

Denial Of Service (DoS)

github.com/nats-io/nats-server is vulnerable to denial of service DoS. Using configs that represent a service export/import cycles, an unauthenticated user is able to crash the server if running NATS services are exposed to untrusted users...

CVE-2020-28466

This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightene...

CVE-2020-28466

CVE-2020-28466 affects the nats-server component at github.com/nats-io/nats-server/server. The issue arises from an export/import cycle between accounts that untrusted users can trigger, causing the server to crash (denial of service) by consuming CPU/memory. Connected advisories indicate the 2.x...

DEBIAN-CVE-2020-28636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...

UBUNTU-CVE-2020-35628

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-incidentsface. An attacker can provide malicious input to trigger this vulnerability...

CGAL 输入验证错误漏洞

Libcgal is an open source C++ library that provides geometric algorithms for fast and reliable data processing. CGAL libcgal NefS2/SNCioparser.h in CGAL-5.1.1 SNCioparser::readsloop slh-incidentsface suffers from an out-of-bounds read vulnerability, which can be exploited by an attacker to achiev...

CGAL 输入验证错误漏洞

Libcgal is an open source C++ library that provides geometric algorithms for fast and reliable data processing. CGAL libcgal NefS2/SNCioparser.h SNCioparser::readsloop slh-twin in CGAL-5.1.1 suffers from an out-of-bounds read vulnerability, which can be exploited by an attacker to achieve code...

CGAL 输入验证错误漏洞

Libcgal is an open source C++ library that provides geometric algorithms for fast and reliable data processing. CGAL libcgal NefS2/SNCioparser.h SNCioparser::readsface sfh-volume in CGAL CGAL-5.1.1 has an out-of-bounds read vulnerability that can be exploited by an attacker to achieve code...

PT-2021-7582 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.10.x through 5.10.154 Description: The issue is related to a use-after-free in the io sqpoll wait sq function in fs/io uring.c, which allows an attacker to crash the kernel, resulting in denial of service. The finish...

PT-2021-1525 · Google +1 · Android Kernel +1

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a use after free in the io uring subsystem of the Linux kernel, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not required fo...