Important: kernel

Issue Overview: A flaw was found in the Linux kernel. When reusing a socket with an attached dccpshctxccid as a listener, the socket will be used after being released leading to denial of service DoS or a potential code execution. The highest threat from this vulnerability is to data...

fc-rw-wolgast.de Cross Site Scripting vulnerability OBB-2335512

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the dxfRW function in the processLType() method of the libdfxfw library in the LibreCad automated design system allows a perpetrator to execute arbitrary code.

The vulnerability of the dxfRW function in the processLType method of the libdfxfw library in the LibreCad automated design system is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created .dxf format...

PT-2021-13355

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to an incorrect bounds check in the rw t4t sm detect ndef function of rw t4t.cc, which can lead to a possible out of bounds read. This could result in remote information disclosure d...

CVE-2021-36097

Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the queue where the agent has "rw" permissions and gain a full control. This issue affects: OTRS AG OTRS 8.0.x version: 8.0.16 and prior versions...

PT-2021-13335

Name of the Vulnerable Software and Affected Versions Android versions 8.1 through 11 Description The issue is related to a possible memory corruption due to a race condition in the RW SetActivatedTagType function of rw main.cc. This could lead to remote code execution with no additional executio...

PT-2021-6072

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10 through 5.14.6 Description The issue is related to a buffer overflow in the loop rw iter function in the Linux kernel's io uring subsystem, allowing local users to gain privileges. This is due to an error in the...

CVE-2020-36461

An issue was discovered in the noisesearch crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock...

CVE-2021-0548

In rwi93sendtolower of rwi93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2021-13195

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds write due to a missing bounds check in the rw i93 send to lower function of rw i93.cc. This could lead to local escalation of privilege with no addition...

CVE-2021-3491

The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...

PT-2021-13130

Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11 Description: The issue is related to a possible double free due to uninitialized data in the rw t3t process error function of rw t3t.cc. This could lead to remote code execution over NFC with no additional...

Maxim Nesen jersey 安全漏洞

Maxim Nesen jersey is a Maxim Nesen open source application . A REST framework that provides JAX-RS reference implementations and more. Maxim Nesen jersey has a security vulnerability that stems from the inclusion of a local information disclosure vulnerability. This is due to the use of file...

PT-2021-13107

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11 Description: The issue is related to a missing bounds check in the rw mfc handle read op function of rw mfc.cc, which could lead to a possible out of bounds write. This could result in remote cod...

Rust Competition Condition Problem Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust lockapi crate before 0.4.2, which stems from an unsound RwLockWriteGuard that could lead to data contention...

CVE-2020-27051

In NFARwI93WriteMultipleBlocks of nfarwapi.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Andro...

CVE-2020-27048

In RWSendRawFrame of rwmain.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27051

In NFARwI93WriteMultipleBlocks of nfarwapi.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Andro...

CVE-2020-27048

In RWSendRawFrame of rwmain.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2020-16625

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds write in the rw t3t send raw frame function of rw t3t.cc due to a missing bounds check. This could lead to local escalation of privilege with no additiona...