169 matches found
CVE-2021-32625 Redis vulnerability in STRALGO LCS on 32-bit systems
Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This ...
CVE-2021-32625
Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This ...
CVE-2021-32625
Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This ...
PT-2021-7997
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the calculation of report length in the hid submit ctrl function, which does not account for the possibility of a zero-sized report. When a report of size 0 is...
Denial Of Service (DoS)
jackson-dataformat-cbor is vulnerable to denial of service DoS. The vulnerability exists through the eager allocation of byte buffer that causes an out of memory error when a large len value is processed in finishBytes...
CVE-2020-11834
In /SM8250QMaster/android/vendor/oppocharger/oppo/oppovooc.c, the function procfastchgfwupdatewrite in procfastchgfwupdatewrite does not check the parameter len, resulting in a vulnerability...
CVE-2020-11834
In /SM8250QMaster/android/vendor/oppocharger/oppo/oppovooc.c, the function procfastchgfwupdatewrite in procfastchgfwupdatewrite does not check the parameter len, resulting in a vulnerability...
CVE-2020-11833
In /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppomp2650.c, the function mp2650datalogwrite in mp2650datalogwrite does not check the parameter len which causes a vulnerability...
VK.com: Reflected XSS в /video
XSS в поиске по видеозаписям. xss в параметрах date, len, order при поиске видеозаписи с указанием параметров...
OSV-2020-2081 UNKNOWN READ in presym_sym2name
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26400 Crash type: UNKNOWN READ Crash state: presymsym2name sym2namelen mrbsymnamelen...
EulerOS 2.0 SP2 : dcraw (EulerOS-SA-2019-2489)
According to the version of the dcraw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image,...
ThinkAgile CP-SB (Storage Block) BMC Session Handling Vulnerability - Lenovo Support US
No description provided...
System Update Vulnerability - Lenovo Support US
No description provided...
Intel PROSet/Wireless WiFi Software Vulnerability - NL
Lenovo Security Advisory: LEN-27828 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0136 Summary Description: A potential security vulnerability in Intel PROSet/Wireless WiFi Software may allow denial of service. Mitigation Strategy for...
Intel Integrated Performance Primitives (IPP) Information Disclosure - US
Lenovo Security Advisory: LEN-25662 Potential Impact: Information disclosure Severity: Moderate Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12155 Summary Description: Intel has notified Lenovo of a potential security vulnerability in Intel IPP may allow data leakage in cryptographic...
Intel Integrated Performance Primitives (IPP) Information Disclosure - Lenovo Support US
No description provided...
SQL injection vulnerability in joomla! Boo*** component len***_req***_bl*** function
joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the lenreqbl function of the joomla! Boo component. The vulnerability allows attackers to obtain sensitive information about the database...
EUVD-2019-19008
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinMAKERNOTE because of mishandling the datalen variable...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-25444 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2018‑6263, CVE‑2018‑6265, CVE‑2018‑6266 Summary Description: NVIDIA has released a software update for GeForce Experience. This upda...
Xen xen-netback xenvif_set_hash_mapping Integer Overflow Exploit
Exploit for multiple platform in category dos / poc Xen: integer overflow in xen-netback xenvifsethashmapping The xen-netback linux kernel module is the default backend for Xen's virtual network devices. Since commit 40d8abdee806d496a60ee607a6d01b1cd7fabaf0 the backend supports an additional...