PT-2021-28557

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.1 Description The issue concerns a potential use after free in MHI send, which may have security implications. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-28694

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9 through 5.12.3 Description A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.9...

PT-2021-28808

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-28946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.269 Description A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-28592

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.19 Description The issue concerns a potential use after free in MHI send, which may have security implications. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-24598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.19 Description The issue concerns a potential use after free in MHI send, which may have security implications. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

WS-2021-0295

Linux/Kernel in versions v5.12-rc1-dontuse--v5.12.1 is vulnerable to potential use after free in MHI send...

PT-2021-28917

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2024-11148 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the Linux kernel's ipc/mqueue, msg, and sem components can cause a crash when a do mq timedreceive call returns and leaves do mq timedsend to rely on an invalid...

PT-2021-19727

Name of the Vulnerable Software and Affected Versions: Yubico yubihsm-shell versions 2.0.0 through 2.0.3 Description: An issue was discovered in the send secure msg function. The function does not correctly validate the embedded length field of an authenticated message received from the device,...

PT-2021-15789

Name of the Vulnerable Software and Affected Versions Workscout Core WordPress plugin versions prior to 1.3.4 Description The issue arises from the lack of sanitization of chat messages sent via the workscout send message chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame...

Exploit for Injection in Atlassian Jira_Server

Atlassian Jira unauthen template injection CVE-2019-11581...

Zulip 访问控制错误漏洞

Zulip server is an open source team chat application from the American company Zulip. An Access Control Error vulnerability exists in versions of Zulip Server prior to 3.4, which results in a user with this privilege being able to send messages. No details of the vulnerability are provided at thi...

RUSTSEC-2021-0113 AtomicBucket<T> unconditionally implements Send/Sync

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

AtomicBucket<T> unconditionally implements Send/Sync

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

PT-2021-24278

Name of the Vulnerable Software and Affected Versions: metrics-util crate versions prior to 0.7.0 Description: The issue is related to a data race and memory corruption in the AtomicBucket implementation. This occurs because AtomicBucket unconditionally implements the Send and Sync traits, allowi...

CVE-2021-30140

LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...

CVE-2021-30140

LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...

Cross site scripting

LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...

CVE-2021-30140

LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...