Arbitrary Code Execution

firefox-esr:sid is vulnerable to arbitrary code execution. When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code...

Use After Free

chromium:sid is vulnerable to use after free...

Use After Free

chromium:sid is vulnerable to use after free...

Inappropriate Implementation In Storage

chromium:sid is haviing an inappropriate implementation in storage...

Buffer Overflows

bsdiff:sid is vulnerable to buffer overflows. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

Denial Of Service(DoS)

chromium:sid is vulnerable to a denial-of-service vulnerability. An attacker can use a malicious HTTP page to trigger this vulnerability...

Out Of Bounds Memory Access

chromium:sid is vulnerable to out of bounds memory access. An remote attacker is able to send a malicious HTML page to potentially cause out of bounds memory access...

CVE-2021-27927

In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init method. An...

Integer Overflow

open-iscsi:sid is vulnerable to integer overflow. The vulnerability exist in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

Sandbox Escape

chromium, sid is vulnerable to sandbox escape. It is due to a use after free in autofill in Google Chrome which allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Integer Overflow

chromium sid is vulnerable to integer overflow in media in Google Chrome. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Heap Buffer Overflow

chromium:sid is vulnerable to heap buffer overflow. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Use After Free In Payments

chromium, sid is vulnerable to an use after free. An use after free flaw was found in the payments component of the Chromium browser...

CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

DEBIAN-CVE-2020-29660

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/ttyio.c and drivers/tty/ttyjobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24...

CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

Buffer overflow

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

Flexense DupScout Enterprise Buffer Error Vulnerability

Flexense DupScout Enterprise is a duplicate file finder from the Israeli company Flexense. The software supports searching and removing duplicate files from local disks, network shares, NAS storage devices, and enterprise storage systems, and can search for duplicate files, save reports, replace...

Lxml Cross-Site Scripting Vulnerability

Lxml is a software from the individual developer of Lxml that interacts with Python to locate elements in Html. Lxml suffers from a cross-site scripting vulnerability that arises from javascript escaping via a combination of noscript and style. The following products and versions are affected:...