Lucene search
+L

1608 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•6 views

CVE-2022-22532: Inconsistent Interpretation of HTTP Requests

In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling. This could allow the...

9.8CVSS8.3AI score0.02372EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•138 views

SAP NetWeaver AS Java Multiple Vulnerabilities (ICMAD)

SAP NetWeaver Application Server Java is vulnerable to HTTP request smuggling. - An unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling. This could allow the malicious payload to be executed and hence execute functions that cou...

9.8CVSS8.3AI score0.02372EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/01/10 12:00 a.m.•67 views

Insyde InsydeH2O has an unspecified vulnerability

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. The vulnerability stems from a lack of shared memory monitoring of SMI handles. No detailed vulnerability...

9.8CVSS2.4AI score0.01534EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/01/06 12:00 a.m.•15 views

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. The vulnerability stems from a lack of shared memory monitoring of SMI handles. No detailed vulnerability...

9.8CVSS5.5AI score0.01534EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2022/01/04 8:00 a.m.•16 views

A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.

...

7CVSS6.7AI score0.00708EPSS
SaveExploits2
attackerkb
attackerkb
•added 2021/12/22 5:15 p.m.•17 views

CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS6.7AI score0.00708EPSS
SaveExploits2References9
OSV
OSV
•added 2021/12/22 5:15 p.m.•14 views

AZL-7063 CVE-2021-44733 affecting package kernel for versions less than 5.15.18.1-1

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS6.7AI score0.00708EPSS
SaveExploits2References1
OSV
OSV
•added 2021/12/22 5:15 p.m.•6 views

DEBIAN-CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS6.7AI score0.00708EPSS
SaveExploits2References1
NVD
NVD
•added 2021/12/22 5:15 p.m.•26 views

CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS0.00708EPSS
SaveExploits2References7
UbuntuCve
UbuntuCve
•added 2021/12/22 5:15 p.m.•46 views

CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS6.7AI score0.00708EPSS
SaveExploits2References8
Prion
Prion
•added 2021/12/22 5:15 p.m.•39 views

Race condition

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

4.4CVSS7AI score0.00708EPSS
SaveExploits2References6Affected Software4
OSV
OSV
•added 2021/12/22 5:15 p.m.•14 views

UBUNTU-CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS6.7AI score0.00708EPSS
SaveExploits2References9
Cvelist
Cvelist
•added 2021/12/22 12:00 a.m.•58 views

CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7.6AI score0.00708EPSS
SaveExploits2References7
Debian CVE
Debian CVE
•added 2021/12/22 12:00 a.m.•62 views

CVE-2021-44733

A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid during an attempt to free a shared memory object...

7CVSS6.7AI score0.00708EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•27 views

PT-2021-5592

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.15.11 Description A use-after-free exists in the TEE subsystem of the Linux kernel due to a race condition in tee shm get from id during an attempt to free a shared memory object. This issue is related to the...

7CVSS6.7AI score0.00708EPSS
SaveExploits2References456
OSV
OSV
•added 2021/11/23 1:13 p.m.•14 views

CLSA-2021-1637673193 Fix of CVE: CVE-2021-21704, CVE-2021-21703, CVE-2021-21705

CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation - CVE-2021-21705: fix incorrect url password validation - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation...

7.8CVSS7AI score0.02091EPSS
SaveExploits3References1
CloudLinux
CloudLinux
•added 2021/11/23 1:13 p.m.•97 views

Fix of CVE: CVE-2021-21704, CVE-2021-21703, CVE-2021-21705

CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation - CVE-2021-21705: fix incorrect url password validation - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation...

7.8CVSS3AI score0.02091EPSS
SaveExploits3References1
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•39 views

Mozilla Firefox Security Advisory (MFSA2015-87) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS7AI score0.04269EPSS
SaveExploits0References3
CloudLinux
CloudLinux
•added 2021/11/10 6:27 p.m.•81 views

Fix of CVE: CVE-2021-21705, CVE-2021-21704, CVE-2021-21703

CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation - CVE-2021-21705: fix incorrect url password validation - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation...

6.9CVSS7.3AI score0.02091EPSS
SaveExploits3References1
OpenVAS
OpenVAS
•added 2021/11/08 12:00 a.m.•38 views

Mozilla Firefox Security Advisory (MFSA2020-05) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

8.8CVSS7.6AI score0.02356EPSS
SaveExploits0References6
Rows per page
Query Builder