The vulnerability of the dialog/select_media.php implementation in the DedeCMS content management system allows attackers to read arbitrary files.

The vulnerability of the dialog/selectmedia.php implementation in the DedeCMS content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

Medium: mariadb

Issue Overview: getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW. CVE-2021-46659 MariaDB through...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

DEBIAN-CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

Design/Logic Flaw

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

UBUNTU-CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31614: Improper Neutralization of Special Elements used in an SQL Command

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

kernel: mm/damon/reclaim: fix potential memory leak in damon_reclaim_init()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damonreclaiminit damonreclaiminit allocates a memory chunk for ctx with damonnewctx. When damonselectops fails, ctx is not released, which will lead to a memory leak. We should relea...

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

CVE-2021-40331

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue affects Apache Ranger Hive Plugin: from...

CVE-2021-40331

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue affects Apache Ranger Hive Plugin: from...

CVE-2021-40331 Permissions problem in the Apache Ranger Hive Plugin

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue affects Apache Ranger Hive Plugin: from...

CVE-2021-40331: Incorrect Permission Assignment for Critical Resource

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue affects Apache Ranger Hive Plugin: from...

Apache Ranger 安全漏洞

Apache Ranger is a set of architectures from the U.S.-based Apache Foundation that implements comprehensive security measures for Hadoop clusters. The product provides centralized security policy management for core enterprise security requirements such as authorization, billing and data...