5756 matches found
[SECURITY] Fedora 34 Update: rust-cranelift-bforest-0.77.0-1.fc34
Forest of B+-trees...
tinygltf:fuzz_gltf: Crash in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c
Detailed Report: https://oss-fuzz.com/testcase?key=6168577330249728 Project: tinygltf Fuzzing Engine: libFuzzer Fuzz Target: fuzzgltf Job Type: libfuzzerasantinygltf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000889e Crash State:...
[SECURITY] Fedora 35 Update: rust-cranelift-bforest-0.77.0-1.fc35
Forest of B+-trees...
CVE-2021-20317
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
CVE-2021-20317
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
UBUNTU-CVE-2021-20317
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
CVE-2021-20317
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
Linux kernel has unspecified vulnerabilities (CNVD-2022-06509)
Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a corrupted timer tree resulting in a missing task wakeup in the timerqueueadd function in lib/timerqueue.c. The vulnerability can be exploited to cause a denial of...
CVE-2021-20317
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
Linux kernel 安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a corrupted timer tree resulting in a missing task wakeup in the timerqueueadd function in lib/timerqueue.c. The vulnerability can be exploited to cause a denial of...
@convergence/jointjs-utils (>=0.4.0, <=0.6.0), @cronapp/tools (>=1.0.0-SNAPSHOT.4, <=1.0.0-SNAPSHOT.12) +10 more potentially affected by CVE-2021-23444 via jointjs (>=3.1.0, <=3.4.1)
jointjs NPM version =3.1.0, =0.4.0, =1.0.0-SNAPSHOT.4, =1.5.2-3.1, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =1.2.0, =0.9.0, =0.12.0 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2021-23444 Source advisory: OSV:GHSA-F3PP-32QC-36W4...
DRUPAL-CONTRIB-2021-035
This module provides a powerful interface for managing a taxonomy vocabulary. A vocabulary gets displayed in a dynamic tree view, where parent terms can be expanded to list their nested child terms or can be collapsed. The module does not take the correct user permissions into account, allowing a...
CVE-2021-32281
An issue was discovered in gravity through 0.8.1. A heap-buffer-overflow exists in the function gnodefunctionaddupvalue located in gravityast.c. It allows an attacker to cause code Execution...
RLSA-2021:3547 Moderate: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: SVM nested virtualization issue in KVM AVIC support CVE-2021-3653 For more details about the security issues, including the impact...
Cross-site Scripting (XSS) - Stored in fisharebest/webtrees
✍️ Description A malicious actor is able to add a malicious payload as a Family Tree Title, and after click the Family Tree nav button from the My Pages Menu, the XSS payload is executed. 🕵️♂️ Proof of Concept 1;Create a new family tree, either when logging in after install for the first time, or...
Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2021-39135
@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
draco:draco_pc_decoder_fuzzer: Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector
Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5992473277628416 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracopcdecoderfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...
