478 matches found
CVE-2021-34183
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2021-34183
Removed by vendor...
GSD-2021-1000491 ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...
GaussDB Kernel: Setting the Maximum Number of Concurrent Connections to the Database
maxconnections specifies the maximum concurrent connections to the database. Increasing the value of this parameter may cause GaussDB Kernel to request System V to share more memory or semaphore. If this occurs, the shared memory or semaphore will exceed the default value allowed by the OS. When...
SQL Injection Vulnerability in Universal Forms Module of Semaphore CMS E-commerce System
Shining CMS e-commerce system bilingual with mobile version to php + mysql development, site installation is simple and fast. Shining CMS e-commerce system SQL injection vulnerability, attackers can use this vulnerability to obtain data content and other sensitive information...
semaphore-software.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1168558 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Denial Of Service (DoS)
iscsi-initiator-utils is vulnerable to denial of service DoS. It uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
Vulnerability of the rwsem_down_write_slowpath function (kernel/locking/rwsem.c) in the Linux operating system’s kernel, which allows an attacker to disclose protected information or cause service failure
The vulnerability of the rwsemdownwriteslowpath function in the Linux kernel’s locking/rwsem.c file relates to operations that occur outside of the buffer memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...
CentOS Update for bpftool CESA-2019:3979 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4027
An exploitable denial-of-service vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or...
CVE-2018-4027
An exploitable denial-of-service vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or...
PT-2019-10760
Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A denial-of-service issue exists in the XML UploadFile Wi-Fi command of the NT9665X Chipset firmware. It can be triggered by a specially crafted packet, causing a semaphore deadlock that...
CVE-2018-4027: Improper Synchronization
An exploitable denial-of-service vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or...
Novatek NT9665X XML_UploadFile WifiCmd denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version “RoavA1SWV1.9.” A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any...
DEBIAN-CVE-2017-18224
In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service BUG by modifying a certain ecpos field...
CVE-2017-18224
In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service BUG by modifying a certain ecpos field...
Linux kernel denial of service vulnerability (CNVD-2018-06377)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 4.15, which stems from a program that removes the use of semaphores. A local attacker can cause a...
The vulnerability of the WritePICONImage function in the coder/xpm.c file of the console-based graphic editor ImageMagick allows a hacker to cause a system failure.
The vulnerability of the WritePICONImage function in the coder/xpm.c file of the console-based graphic editor ImageMagick arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure loss of...
UBUNTU-CVE-2017-9501
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file...
mod_nss security, bug fix, and enhancement update
1.0.14-7 - Add the permission patch to the repository 1312583 1.0.14-6 - Check the NSS certificate database directory for read permissions by the Apache user. 1312583 1.0.14-5 - Update clean semaphore patch to not free the pinList twice. 1364560 1.0.14-4 - Update clean semaphore patch to not clos...