CVE-2021-3978

CVE-2021-3978 affects Cloudflare CFRPKI’s octorpki. The root cause is that copying files with rsync uses the “-a” flag 0, causing binaries with the SUID bit to be copied as root. The service definition defaults to root, creating a potential local privilege escalation vector if a malicious TAL fil...

CVE-2018-9373

A possible out-of-bounds write exists in the TdlsexRxFrameHandle function of the MTK WLAN driver due to a missing bounds check. This vulnerability could allow an attacker to achieve remote escalation of privilege without requiring additional execution privileges or user interaction. Affected soft...

CVE-2024-27256

CVE-2024-27256 affects IBM MQ Container images: CD v3.0.0, v3.0.1, v3.1.0–3.1.3; LTS v2.0.0–2.0.22; and 2.4.0–2.4.8, 2.3.0–2.3.3, 2.2.0–2.2.2. Description: use of weaker than expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Connected sources corro...

CVE-2019-15690

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution...

CVE-2018-9389

CVE-2018-9389 affects the Linux kernel IPv6 code path, specifically ip6_append_data in ip6_output.c. The vulnerability is described as a heap-based buffer overflow that could enable local code execution, resulting in privilege escalation with no additional privileges required and no user interact...

CVE-2018-9434

A vulnerability in the Android Binder IPC mechanism allows applications to craft Parcels where binder-object metadata overlaps with string data. During unmarshalling, the kernel may insert genuine kernel pointers into attacker-controlled buffers, which can then be leaked through services like the...

CVE-2018-9382

A missing permission check in multiple functions of WifiServiceImpl.java allows an attacker to activate a Wi-Fi hotspot from a non-owner profile. This vulnerability can lead to local elevation of privilege (EoP) without requiring additional execution privileges or user interaction. This issue aff...

CVE-2018-9379

This vulnerability affects the Media framework component on Google Pixel and Google Nexus devices. Due to a confused deputy issue in multiple functions of MiniThumbFile.java , an attacker can view thumbnails of deleted photos. This leads to local information disclosure without requiring additiona...

CVE-2017-13322

CVE-2017-13322 is an Android DoS vulnerability in the system component (PhoneInterfaceManager.java) due to a logic error in endCallForSubscriber that can prevent emergency services access locally, with no user interaction required. Affected: Google Pixel/Nexus devices (Android framework/system). ...

CVE-2018-9384

CVE-2018-9384 describes an information disclosure vulnerability within the Kernel component of Google Pixel and Nexus devices. Due to an unusual root cause, attackers can bypass KASLR (Kernel Address Space Layout Randomization), leading to local information disclosure. Exploitation requires Syste...

SUSE CVE-2024-57849

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...

DEBIAN-CVE-2024-57849

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...

UBUNTU-CVE-2024-57849

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...

CVE-2024-57849 s390/cpum_sf: Handle CPU hotplug remove during sampling

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...

CVE-2023-27539

CVE-2023-27539 concerns a denial-of-service vulnerability in the header parsing component of Rack (Ruby Rack). The issue is described as a vulnerability in Rack's header parsing that can affect applications parsing HTTP headers with Rack, leading to potential DoS. The NVD metrics show a MEDIUM-se...

CVE-2023-23913

A DOM-based cross-site scripting (XSS) vulnerability exists in rails-ujs (part of Rails/actionview since version 5.1.0) affecting versions >= 5.1.0 . The flaw allows an attacker to execute arbitrary JavaScript on the origin by leveraging the Clipboard API to target HTML elements with the conte...

CVE-2023-27539

There is a denial of service vulnerability in the header parsing component of Rack...

CVE-2023-28120

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...

CVE-2023-28120

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...

CVE-2023-35685

CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...