12793 matches found
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
PT-2021-24350
Name of the Vulnerable Software and Affected Versions: TinyMCE versions prior to 5.9.0 Description: A stored cross-site scripting vulnerability affects TinyMCE, allowing an unauthenticated and remote attacker to insert crafted HTML into the editor. This results in arbitrary JavaScript execution i...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
redis: Integer overflow issue with intsets
An integer overflow issue was found in redis. The vulnerability involves changing the default "set-max-intset-entries" configuration parameter to a very large value and constructing specially crafted commands to manipulate sets. This flaw allows a remote attacker to leak arbitrary contents of the...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
Redis Code Execution
The vulnerability of the set-max-intset-entries configuration parameter in the Redis database management system is related to the possibility of integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
redis: Integer overflow issue with intsets
An integer overflow issue was found in redis. The vulnerability involves changing the default "set-max-intset-entries" configuration parameter to a very large value and constructing specially crafted commands to manipulate sets. This flaw allows a remote attacker to leak arbitrary contents of the...
PT-2021-26098
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.72 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.10.73. The actual impact and attack plausibility...
PT-2021-30016
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v4.19.211. The actual impact and attack plausibility have...
PT-2021-30093
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.72 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.10.73. The actual impact and attack plausibility...
PT-2021-26163
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.14.12. The actual impact and attack plausibility have n...
PT-2021-26051
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description A potential security issue exists due to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-26108
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue concerns the ext4 file system in the Linux Kernel. It involves adding error checking to the ext4 ext replay set iblocks function. The actual impact and potential for attack have not...
PT-2021-25975
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.287 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2021-25994
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.251 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...
PT-2021-29970
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.287 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2021-26180
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.14.9 Description: The issue concerns the ext4 file system in the Linux Kernel. It involves adding error checking to the ext4 ext replay set iblocks function. The actual impact and attack plausibility hav...
PT-2021-29958
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.4.288 Description A potential issue exists in the net sched component, specifically a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven...