3593 matches found
PT-2022-36411
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.225 Description The issue is related to an alignment problem in the bpf prog test run skb function. It was introduced in version v4.12 and fixed in version v5.4.225. The actual impact and attack plausibility...
Django: SQL injection in QuerySet.annotate(),aggregate() and extra()
A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely...
ASB-A-253978040
A race condition Use After Freee issue in unisoc sprd sdiohaldebug driver, which may cause EoP problem...
CVE-2014-4931
Summary: The connected documents describe a code injection vulnerability in Symfony’s translation caching within FrameworkBundle. The issue arises when locales from URLs are not sanitized before being dumped into a PHP cache file, enabling an attacker to inject PHP code via a crafted locale value...
CVE-2020-1441
CVE-2020-1441 is a Windows Spatial Data Service Elevation of Privilege vulnerability. The issue arises from improper handling of memory objects in Spatial Data Service, allowing a user who can log on to overwrite or modify protected files to gain elevated privileges on Windows 10 version 1903 (KB...
Google TensorFlow buffer overflow vulnerability (CNVD-2022-80680)
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from tf.rawops.ResizeNearestNeighborGrad's lack of length size validation of the input data. validation, an attacker could exploi...
CVE-2022-42187
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problemjudge.php...
Cross site scripting
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problemjudge.php...
CVE-2022-42187
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problemjudge.php...
CVE-2022-42187
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problemjudge.php...
PT-2022-26301 · Hustoj · Hustoj
Name of the Vulnerable Software and Affected Versions: Hustoj version 22.09.22 Description: The issue is related to a XSS vulnerability in the /admin/problem judge.php endpoint. Recommendations: For Hustoj version 22.09.22, consider restricting access to the /admin/problem judge.php endpoint unti...
HUSTOJ Cross-Site Script Vulnerabilities
HUSTOJ is a popular OJ system from the Chinese individual developer Zhang Haobin zhblue. A cross-site scripting vulnerability exists in HUSTOJ version 22.09.22, which stems from a cross-site scripting XSS vulnerability in /admin/problemjudge.php...
Buffer overflow
In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an attacker to cause SMRAM corruption and escalation of privileges The UsbCoreDxe module creates a working buffer for USB...
CVE-2021-42898
Technical details for CVE-2021-42898 are not publicly available in the provided documents. Monitor for updates as the Initial Description indicates the candidate is reserved.
CVE-2022-30283
In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an attacker to cause SMRAM corruption and escalation of privileges The UsbCoreDxe module creates a working buffer for USB...
PT-2022-35479
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue concerns a rate rounding problem in the zynqmp pll round rate function of the Linux Kernel's zynqmp pll component. The actual impact and potential for attack have not been confirme...
CVE-2022-45081
CVE-2022-45081 is associated with a Missing Access Control vulnerability in WordPress plugin "Add Multiple Marker" (versions
PVS: Targets fail to boot since it attempts to boot from wrong PVS servers
PVS created a new PVS site and updated option 66 and 67 in the DHCP servers, but Targets failed to connect to the PVS servers in the new PVS site during boot, and it continued to use the PVS servers in old PVS Site...
Update 19.13 for Microsoft Dynamics 365 Business Central (on-premises) 2021 Release Wave 2 (Application Build 19.13.48486, Platform Build 19.0.48446)
Update 19.13 for Microsoft Dynamics 365 Business Central on-premises 2021 Release Wave 2 Application Build 19.13.48486, Platform Build 19.0.48446 Applies To Dynamics 365 Business Central on-premises 2021 release wave 2, version 19 Overview This update replaces previously released updates. You...