CVE-2019-5462

CVE-2019-5462 : Privilege escalation in GitLab CE/EE 9.0 and later where trigger tokens are not rotated after ownership changes. Affected: GitLab CE/EE; Vulnerable: trigger token handling module. Root cause stated: tokens remain valid after ownership transfer, enabling elevated access. No remedia...

CVE-2019-5462

Removed by vendor...

CVE-2019-5462

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed...

Denial Of Service (DoS)

libsystemd.so is affected by memory leak. The buttonopen function in login/logind-button.c does not properly handle the execution of the udevadm trigger command, allowing an attacker to read memory and application crash...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2019-1231)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ai.hyacinth.framework:core-service-admin-server (>=0.5.8 <=0.5.21), ai.hyacinth.framework:core-service-gateway-server (>=0.5.8 <=0.5.21) +38 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.1.0.RELEASE <=5.1.12.RELEASE)

org.springframework:spring-webflux MAVEN version =5.1.0.RELEASE, =0.5.8, =0.5.8, =0.5.8, =0.5.0, =1.1.1.RELEASE, =1.0.6.RELEASE, =1.0.0, =1.3.5, =1.0.4.RELEASE, =1.7.0, =1.1.1-Greenwich, =1.1.1-Greenwich, =1.1.2-Greenwich and more Source cves: CVE-2020-5398 Source advisory: OSV:GHSA-8WX2-9Q48-VM9...

CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

DEBIAN-CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

Memory corruption

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

UBUNTU-CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

CVE-2019-20386

An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

CVE-2019-20386

CVE-2019-20386 affects systemd and is caused by a memory leak in button_open() invoked when handling udev events via login/logind-button.c, enabling local DoS under certain conditions. Public doks confirm exploit path through udevadm trigger to trigger memory leak and potential denial of service....

Systemd Memory Leak Vulnerability

systemd is a system and service manager for the Linux operating system. A memory leak vulnerability exists in buttonopen in login/logind-button.c in versions prior to systemd 243 when executing the udevadm trigger command. No details of the vulnerability are provided at this time...

GHSA-JGJC-332C-8CMC SQL injection in phpMyAdmin

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

Vulnerability of the nfp_flower_spawn_vnic_reprs() function (drivers/net/ethernet/netronome/nfp/flower/main.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the nfpflowerspawnvnicreprs function in the drivers/net/ethernet/netronome/nfp/flower/main.c file of the Linux kernel is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Integer Overflow Vulnerability in QQ Browser

QQ Browser is a browser. An integer overflow vulnerability exists in QQ Browser. An attacker can exploit the vulnerability to cause the browser to crash and flashback...

CloudBees Jenkins Gerrit Trigger plugin cross-site request forgery vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site request forgery vulnerability exists in CloudBees Jenkins Gerrit Trigger Plugin 2.30.1 and prior versions. The vulnerability stems from a WEB...