CVE-2019-20427

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

CVE-2019-20432

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdtfilesecctxunpack does not validate the value of namesize derived from reqcapsulegetsize...

CVE-2019-20424

In the Lustre file system before 2.12.3, mdtobjectremote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client...

CVE-2019-20426

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function ldlmcancelhpreqcheck, there is no lockcount bounds check...

UBUNTU-CVE-2019-20427

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

UBUNTU-CVE-2019-20429

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic via a modified lmbufcount field due to the lack of validation for specific fields of packets sent by a client. This is caused by interaction between sptlrpcsvcunwraprequest and lustremsghdrsizev2...

UBUNTU-CVE-2019-20425

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function lustremsgstring, there is no validation of a certain length value derived from lustremsgbuflenv2...

UBUNTU-CVE-2019-20426

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function ldlmcancelhpreqcheck, there is no lockcount bounds check...

libIEC61850 Heap Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A heap buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 1.4.0 and earlier. The vulnerability stems from a lack of proper validation of clien...

bootstrap: XSS in the tooltip data-viewport attribute

A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting, caused by improper validation of user-supplied input by the tooltip data-viewport attribute. This flaw allows a remote attacker to execute a script in a victim's Web browser within the security context of the hosting W...

CVE-2020-7045

In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes...

Online TV Database SQL Injection Vulnerability

Online TV Database is a set of online TV program database. A SQL injection vulnerability exists in the 'ID' parameter in Online TV Database version 2011. The vulnerability stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit...

RICOH SP C250DN Cross-Site Request Forgery Vulnerability

The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. A cross-site request forgery vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker cou...

SOPlanning SQL Injection Vulnerability

SOPlanning is an online planning tool. A SQL injection vulnerability exists in SOPlanning version 1.45. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

PT-2021-6711 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a Buffer Overflow in the config input function within the libavfilter/vf gblur.c component of the Ffmpeg library. This allows attackers to potentially cause a Denial of Service or...

Typora Cross-Site Scripting Vulnerability (CNVD-2020-03714)

Typora is an editor. A cross-site scripting vulnerability in Typora 0.9.9.31.2 and earlier macOS and 0.9.81 and earlier Linux, which stems from a lack of proper validation of client-side data by the WEB application, can be exploited by an attacker to execute client-side code...

Dairy Farm Shop Management System SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A SQL injection vulnerability exists in Dairy Farm Shop Management System version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in a database-based application. ...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-01236)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab. Th...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An OverflowError or MemoryError occurs in FpxImagePlugin.py on an unvalidated 32-bit integer when large number of bands is given, resulting in an application crash...

ALPINE-CVE-2019-19911

There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux...