Command injection

Barco TransForm N before 3.8 allows Command Injection issue 2 of 4. The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An...

PT-2021-10090

Name of the Vulnerable Software and Affected Versions: Barco TransForm N versions prior to 3.8 Description: The issue allows authenticated users of the administration panel to perform authenticated remote code execution due to a command injection problem. This problem exists in the split card...

PT-2021-10091

Name of the Vulnerable Software and Affected Versions: Barco TransForm N versions prior to 3.8 Description: The NDN-210 device has a web administration panel accessible over https, where a command injection issue allows authenticated users to perform remote code execution. The issue is located in...

Directory Traversal

Overview com.google.android.play:core is a Google Play Core Library. Affected versions of this package are vulnerable to Directory Traversal. This flaw is in the SplitCompat.install endpoint. A malicious attacker can create an apk which targets a specific application, and if a victim were to...

Consensus Flaw During Block Processing

github.com/ethereum/go-ethereum is having a consensus flaw during block processing. It leads to a chain split, where vulnerable versions refuse to accept the canonical chain...

CVE-2020-26265

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

Code injection

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

CVE-2020-26265

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

CVE-2020-26265

Go Ethereum (Geth) up to v1.9.19 (inclusive) is affected by a consensus vulnerability that could lead to a chain split where non-canonical chains are rejected. The issue stems from how state/account creation interacted with deleted accounts, causing inconsistent consensus under certain transactio...

CVE-2020-26265: Incorrect Calculation

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

PT-2020-16388

Name of the Vulnerable Software and Affected Versions Geth versions 1.9.4 through 1.9.20 Description A consensus issue could cause a chain split, where vulnerable versions refuse to accept the canonical chain. This occurs due to an incorrect state calculation when processing a particular sequence...

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check aka CID-c444eb564fb1.

...

Vulnerability of the __split_huge_pmd function (mm/huge_memory.c) in Linux operating system kernels, allowing attackers to execute arbitrary code

The vulnerability of the splithugepmd function in the Linux operating system’s kernel is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel code issue vulnerability (CNVD-2020-68543)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.5, which stems from a contention condition in split huge pmd in mm huge memoryc, where the copy-on-writ...

PDF Cat Split & Merge Software Exploits a dll Hijacking Vulnerability

PDF Cat Split and Merge Software is a PDF file to merge the operation of the software. PDF Cat Split & Merge Software has a dll hijacking vulnerability, which can be exploited by attackers to load a dll without signing and file verification, resulting in dll hijacking...

DEBIAN-CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

UBUNTU-CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.5, which stems from a contention condition in split huge pmd in mm huge memoryc, where the copy-on-writ...

CVE-2020-26241

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...

CVE-2020-26241

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...