SUSE CVE-2018-6536

An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script...

SUSE CVE-2018-16888

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user e.g. User field set in the service file, a local attacker who is able to write to the PIDFile of the mentioned service may use this fl...

SUSE CVE-2018-1000200

The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory OOM killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exitmmap, which calls munlockvmapagesall for mlocked vmas.This can happen...

SUSE CVE-2019-2389

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11;...

SUSE CVE-2019-18680

An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rdstcpkillsock in net/rds/tcp.c that will cause denial of service, aka CID-91573ae4aed0...

MultipartParser denial of service with too many fields or files

Impact The MultipartParser using the package python-multipart accepts an unlimited number of multipart parts form fields or files. Processing too many parts results in high CPU usage and high memory usage, eventually leading to an OOM process kill. This can be triggered by sending too many small...

CVE-2022-43665

A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability...

PT-2023-33693 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the sk stream kill queues function, where the sk error queue is not properly purged. This could potentially lead to security vulnerabilities, although the actual impa...

PT-2023-34651

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to the sk stream kill queues function, where the sk error queue is not properly purged. This could potentially lead to security vulnerabilities, although the actual impac...

PT-2023-34115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the sk stream kill queues function, where the sk error queue is not properly purged. This could potentially lead to security vulnerabilities, although the actual impac...

PT-2023-33707

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the kprobes functionality in the Linux Kernel. A fix has been applied to address a potential security concern in the kill kprobe function. The actual impact and attack...

Sql injection

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

CVE-2014-125037

CVE-2014-125037 affects the License to Kill project, specifically the models/injury.rb component. The issue arises from manipulation of the name argument, resulting in an SQL injection vulnerability. A patch identified as cd11cf174f361c98e9b1b4c281aa7b77f46b5078 is available, with recommendations...

CVE-2014-125037

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

License To Kill SQL注入漏洞

License To Kill is a database project by Eliza Brock Marcum, an individual developer. License To Kill suffers from an SQL injection vulnerability that stems from an incorrect manipulation of the parameter name resulting in sql injection...

PT-2023-10107 · Unknown · License To Kill

Name of the Vulnerable Software and Affected Versions: License to Kill affected versions not specified Description: A critical issue was found in License to Kill, affecting an unknown part of the file models/injury.rb. The manipulation of the name argument leads to sql injection. Recommendations:...

CVE-2014-125037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch...

PT-2022-36347

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.110 through 5.10.154 Description The issue is related to a warning in sk stream kill queues in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36218

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.33 through 5.15.78 Description The issue is related to a warning in sk stream kill queues in the Linux Kernel. It was introduced in version 5.15.33 and fixed in version 5.15.79. The actual impact and attack...

Effective Vulnerability Management with Stakeholder Specific Vulnerability Categorization (SSVC) and Qualys TruRisk

Security stakeholders across the globe have long relied on the Common Vulnerability Scoring System CVSS to prioritize vulnerabilities and assess their risk posture. The reason why the CVSS has become the standard for many security and vulnerability management teams alike is that this method is ea...