Shenzhim Aaptjs 操作系统命令注入漏洞

aaptjs is a node wrapper for aapt. aaptjs version 1.3.1 has a remote code execution vulnerability in the remove function. An attacker can exploit this vulnerability to execute arbitrary code via the filePath parameter...

GSD-2021-1000079 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000079 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

PT-2024-11149 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been resolved in the Linux kernel. The issue occurred in the uio hv generic module, where memory allocated by vmbus alloc ring at the beginning of the probe function...

PT-2024-11196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak in the Linux kernel has been resolved. The issue occurred in the ptp: ocp module, where an error handling path failed to properly undo a successful 'pci ioremap bar' call...

PT-2024-11135 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns resource leaks in the error path of the venus probe function. If an error occurs after a successful of icc get call, it must be undone to prevent leaks. Using devm o...

CVE-2019-13465

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. ROSASSERTMSG only works when ROSASSERTENABLED is defined. This leads to a problem in the remove function in clients/roscpp/src/libros/spinner.cpp. When ROSASSERTENABLED is not...

CGIScript.net csPassword.CGI 1.0 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4887/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. A vulnerability has been reported in the csPassword.cgi script developed by CGIScript.net that discloses...

Alibaba Alipay ActiveX memory corruption

Memory free by controlled address in Remove function...