4415 matches found
SQL Injection in pimcore/pimcore
Description The storeId parameter does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection. Proof of Concept 1. Add items to Classification Store: Key definition, Group,... 2. Injection boolean base:...
Hardcoded credentials
A hardcoded key in ControlUp Real-Time Agent cuAgent.exe before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel...
Debian DLA-2874-1 : thunderbird - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2874 advisory. - During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash...
GSD-2021-1002839 mm/damon/dbgfs: protect targets destructions with kdamond_lock
mm/damon/dbgfs: protect targets destructions with kdamondlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...
GSD-2021-1002809 mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
mm/hwpoison: clear MFCOUNTINCREASED before retrying getanypage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.89 by commit...
GSD-2021-1002789 hamradio: defer ax25 kfree after unregister_netdev
hamradio: defer ax25 kfree after unregisternetdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.223 by commit...
GSD-2021-1002782 hamradio: defer ax25 kfree after unregister_netdev
hamradio: defer ax25 kfree after unregisternetdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.260 by commit...
FreeBSD : Mbed TLS -- Potential double-free after an out of memory error (c1b2b492-6999-11ec-a50c-001cc0382b2f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c1b2b492-6999-11ec-a50c-001cc0382b2f advisory. - Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an...
CVE-2021-23244
ColorOS is affected by a vulnerability where dangerous permissions are pre-granted to apps listed in a whitelist XML named default-grant-permissions. If an app from the whitelist is not installed, an attacker can masquerade with the same package name to obtain those dangerous permissions. The iss...
GSD-2021-1002703 igbvf: fix double free in `igbvf_probe`
igbvf: fix double free in igbvfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit 74a16e062b23332d8db017ff4a41e16279c44411...
GSD-2021-1002699 dm btree remove: fix use after free in rebalance_children()
dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
GSD-2021-1002693 sch_cake: do not call cake_destroy() from cake_init()
schcake: do not call cakedestroy from cakeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
GSD-2021-1002678 sit: do not call ipip6_dev_free() from sit_init_net()
sit: do not call ipip6devfree from sitinitnet This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...
GSD-2021-1002671 inet_diag: fix kernel-infoleak for UDP sockets
inetdiag: fix kernel-infoleak for UDP sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...
GSD-2021-1002651 dm btree remove: fix use after free in rebalance_children()
dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...
GSD-2021-1002640 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.259 by commit...
GSD-2021-1002639 xen/netback: don't queue unlimited number of packages
xen/netback: don't queue unlimited number of packages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.259 by commit...
GSD-2021-1002638 dm btree remove: fix use after free in rebalance_children()
dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.259 by commit...
GSD-2021-1002635 sit: do not call ipip6_dev_free() from sit_init_net()
sit: do not call ipip6devfree from sitinitnet This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.259 by commit...
