3150 matches found
CVE-2021-46668
Removed by vendor...
MariaDB 资源管理错误漏洞
MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A resource management error vulnerability exists in MariaDB that stems from the product's long SELECT DISTINCT statement not restricting th...
CVE-2021-46668: Uncontrolled Resource Consumption
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...
MariaDB 代码问题漏洞
MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.A code issue vulnerability exists in MariaDB, which stems from the fact that the product allows certain SELECT statements to cause...
CVE-2021-46663: Undefined Security Weakness
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
ALPINE-CVE-2021-46659
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...
CVE-2021-43971
A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter...
QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...
southernselectautosales.com Cross Site Scripting vulnerability OBB-2318535
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2021-1002661 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...
PT-2021-27151
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description A sanity check has been added to the resp mode select function to verify the block descriptor length. The actual impact and attack plausibility of this issue have not yet been proven...
PT-2021-27183
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27108
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27129
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27094
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.294 Description The issue is related to a sanity check in the resp mode select function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2021-27236
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-8228
Name of the Vulnerable Software and Affected Versions Linux kernel version 5.15.0-01d0625 Description The vulnerability is related to a use-after-free issue in the resp mode select function of the scsi debug component. This issue can be exploited to potentially elevate privileges in the system. T...
QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...
QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...
