51 matches found
AZL-56379 CVE-2024-45339 affecting package glog 0.3.5-16
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...
CVE-2024-45339
The golang-glog library is vulnerable to a symlink attack because it writes logs to a widely-writable directory by default. An unprivileged attacker can predict a privileged process's log path and pre-create a symbolic link to a sensitive file. When the privileged process runs, it follows the lin...
glibc: null pointer dereferences after failed netgroup cache insertion
A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit...
CVE-2024-26782
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inetopt' for the new socket has the same value as the original one: as a...
CVE-2024-26782
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inetopt' for the new socket has the same value as the original one: as a...
CVE-2022-48509
CVE-2022-48509 describes a race condition in Huawei Share within Huawei HarmonyOS caused by multi-thread access to mutually exclusive resources. The vulnerability may cause the affected program to exit abnormally if exploited. Based on available sources, the issue is a race condition with impact ...
Huawei HarmonyOS competition conditions vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from Huawei sharing a conditional contention vulnerability due to multi-threaded access to...
The gotcha of unhandled promise rejections
Let's say you wanted to display a bunch of chapters on the page, and for whatever reason, the API only gives you a chapter at a time. You could do this: async function showChapterschapterURLs for const url of chapterURLs const response = await fetchurl; const chapterData = await response.json;...
Buffer Overflow Vulnerability in IEC104
The IEC104 statute is an international standard widely used in industries such as electric power and urban rail transit. A buffer overflow vulnerability exists in IEC104, which can be exploited by an attacker to trigger a stack buffer overflow and cause a program exit...
Denial of Service Vulnerability in ForceControl V7.2 Product NetServer.exe
ForceControl is the configuration software developed by ForceControl Technology for the general monitoring and control configuration software market. As the basic platform software in industrial automation software, ForceControl can provide solutions for all kinds of industries. A denial of servi...
