DEBIAN-CVE-2021-46924

In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...

CVE-2021-46924

In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...

UBUNTU-CVE-2021-46924

In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object...

PT-2024-20267 · Code Projects · Code-Projects Computer Book Store

Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue is related to SQL Injection via BookSBIN. Recommendations: For Code-projects Computer Book Store version 1.0, consider restricting access to the BookSBIN component to minimi...

CAN-2004-0028

CVE-2004-0028 relates to jitterbug, a CGI bug-tracking tool. The issue is improper input sanitization in jitterbug 1.6.2 that allows remote authenticated users to execute arbitrary commands on the server. Debian’s DSA-420-1 and related advisories record this as a remote command-execution vulnerab...

CAN-2004-0458

CVE-2004-0458 affects mah-jong (server component) prior to version 1.6.2. A missing argument can trigger a NULL pointer dereference, allowing remote attackers to cause a denial of service (server crash). Public advisories reference Debian (DSA-503), Ubuntu, and CVE records; the mitigation is to u...

CAN-2004-0837

MODE C The CVE CAN-2004-0837 (CVE-2004-0837) has concrete OpenVAS/related advisories tying it to MySQL in multiple decks. Affected entries/drivers include: SUSE/SLES9 (Security update for MySQL; CVSS 10.0; patches 120293-02, 120292-02), Gentoo GLSA 200410-22 (MySQL), Gentoo/OpenVAS entries refere...

CAN-2004-0981

CVE-2004-0981 is linked to ImageMagick and is discussed in multiple advisories (Debian DSA 593-1, Gentoo GLSA 200411-11, Ubuntu USN-7-1/USN-10-1, FreeBSD Ports) with CVSS base 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C). The OpenVAS entries and Gentoo/Ubuntu/Debian advisories describe a vulnerability in Im...

CAN-2004-1179

CVE-2004-1179 affects the debmake package: the debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack in temporary directories. The provided documents identify the affected versions and the local access requirement;...

CAN-2004-1318

Summary of CVE-2004-1318 (Namazu): Namazu2’s namazu.cgi accepts input that is not properly sanitised, allowing a remote attacker to cause cross-site scripting (XSS). The Debian advisories (DSA-627-1) describe the flaw as unsanitised input in Namazu2, with exploitation via a crafted query, notably...

CAN-2005-0071

The CVE-2005-0071 entry applies to Video Disk Recorder (VDR) prior to version 1.2.6. The vulnerability is that VDR did not securely create files, allowing a local attacker to overwrite arbitrary files via insecure file handling. Public records (OSV OSV-) summarize: vdr before 1.2.6 does not secur...

CAN-2004-1120

The CVE CAN-2004-1120 applies to prozilla (a multi-threaded download accelerator). Multiple buffer overflow flaws could be triggered remotely to execute arbitrary code. Public advisories (e.g., Debian DSA-663-1) document remote code execution via these overflows and list fixed versions: prozilla ...

CAN-2005-0448

CVE-2005-0448 is a race condition in Perl's File::Path::rmtree that could allow a local user to create setuid binaries or delete arbitrary files via a symlink attack. Connected advisories confirm this issue as the original rmtree race (not a remote exploit) and note it has been reintroduced in ce...

CAN-2005-0100

The connected documents tie CVE-2005-0100 to Emacs across multiple advisories (Debian DSA-671-1, SLES9 Emacs update, Gentoo GLSA 200502-20, FreeBSD ports, Gentoo/Debian entries in OpenVAS). They provide CVSS context (base 7.5, vector AV:N/AC:L/Au:N/C:P/I:P/A:P) in OpenVAS entries, and mention upd...

CAN-2005-2101

CVE-2005-2101 concerns the KDE kdeedu suite, where the lange n2kvhtml converter (langen2kvhtml) creates insecure temporary files in /tmp with predictable names. This local-privilege issue allows a non-privileged user to potentially overwrite files, as described in Debian security advisories (DSA-...

CAN-2005-2536

CVE-2005-2536 affects pstotext, which failed to use Ghostscript -dSAFER, allowing remote attackers to exploit malformed PostScript/PDF files to execute arbitrary commands. The issue is documented in Debian DSA-792-1 and OSSC/NASL entries, stating that pstotext did not invoke -dSAFER and that fixe...

CAN-2005-2960

The CVE CVE-2005-2960 is linked to cfengine and arises from insecure temporary-file handling that allows a local attacker to perform a symlink attack to overwrite files owned by the cfengine user (likely root). Connected documents describe vulnerable cfengine versions (e.g., cfengine <= 1.6.5 ...

Invitation Token Circumvention

deviseinvitable is vulnerable to Invitation Token Circumvention. The vulnerability is due to improper validation of the expiry period of pending invitations, allowing attackers to accept invitations indefinitely through the password reset functionality...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the parsemetasequenceend function. An attacker can execute arbitrary code or cause a denial of service by causing the vulnerable application to process a malicious DICOM image. Remediation A fix was pushed into the master...

PT-2024-14589 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved by reverting a commit that introduced a race condition, potentially causing system hangs. The issue occurred in the md/raid5 modul...