CVE-2021-37158: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

PT-2021-21539

Name of the Vulnerable Software and Affected Versions OpenGamePanel OGP-Agent-Linux versions through 2021-08-14 Description An issue was discovered that allows an authenticated attacker to inject OS commands. This can be achieved by starting a Counter-Strike server and using the map field to ente...

samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token

A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...

PT-2021-30315

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.75 Description The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.10.76. The actual impact and attack plausibili...

PT-2021-30269

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue concerns a fix in the debug dma map sg function related to sg checks. It was introduced in version v2.6.31 and fixed in version v4.19.214. The actual impact and attack plausibility...

PT-2021-26361

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.14.15. The actual impact and attack plausibility...

PT-2021-26320

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.31 through 5.10.75 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.10.76. The actual impact and attack...

PT-2021-30356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.14.15. The actual impact and attack plausibility ha...

PT-2021-26274

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.214 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v4.19.214. The actual impact and attack plausibilit...

PT-2021-30288

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.155 Description The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.4.156. The actual impact and attack plausibili...

PT-2021-26293

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.31 through 5.4.155 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.4.156. The actual impact and attack...

The vulnerability of the `build_diff_map` function in the Ffmpeg library, related to buffer overflows in memory, allows a hacker to trigger a service denial.

The vulnerability of the builddiffmap function in the Ffmpeg library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the hw/usb/hcd-xhci.c component of the QEMU hardware emulation software arises from the use of memory after it has been freed. This allows a malicious actor to trigger a service failure.

The vulnerability in the hw/usb/hcd-xhci.c component of the QEMU hardware emulation software is related to the lack of checking for the return value of usbpacketmap. Exploiting this vulnerability could allow a attacker to cause a service failure...

OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

CVE-2021-40371

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap...

SolarWinds Orion Platform has an unspecified vulnerability (CNVD-2021-101208)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based views of the entire network...

Teeworlds -- Buffer Overflow

NVD reports: Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate mChannels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service...

SolarWinds Orion Platform 安全漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based views of the entire network...