12107 matches found
CVE-2021-30454
An issue was discovered in the outercgi crate before 0.2.1 for Rust. A user-provided Read instance receives an uninitialized memory buffer from KeyValueReader...
Exposure of class information in RESTEasy
A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value aka CID-175e476b8cdf.
...
The vulnerability in the implementation of the vhost_vdpa_config_put() function in Linux kernel allows a attacker to cause a service failure.
The vulnerability of the vhostvdpaconfigput function in Linux kernel relates to an unacceptable value of v-configctx when a symbolic device is reopened. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the authenticate function in the services/httpd/handler.go component of the database, related to the deficiencies in the authentication process, allows attackers to access sensitive data, compromise its integrity, and cause service failures.
The vulnerability in the authenticate function of the services/httpd/handler.go component of the database backend, InfluxDB, stems from the lack of a check to ensure that a value is present in the parameter. Exploiting this vulnerability allows an attacker who operates remotely to access...
The vulnerability of the p11_rpc_buffer_get_byte_array_value function in the library for working with PKCS P11-kit modules, related to writing beyond the buffer’s boundaries, allows a hacker to cause a service failure.
The vulnerability of the p11rpcbuffergetbytearrayvalue function in the library for working with PKCS P11-kit modules is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
CVE-2021-29937
An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...
CVE-2021-29937
An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...
ASB-A-180427272
In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2019-19004
A biWidthbiBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image...
OSV-2021-586 Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32682 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...
DEBIAN-CVE-2021-29650
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service panic because net/netfilter/xtables.c and include/linux/netfilter/xtables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf...
CVE-2021-29650
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service panic because net/netfilter/xtables.c and include/linux/netfilter/xtables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf...
Ziggy Ransomware Gang Offers Refunds to Victims
The Ziggy ransomware gang announced in early February they were getting out of the cybercrime business. Now they say they’re ready to refund their victims’ money. Anyone who paid a ransom to Ziggy just needs to shoot them an email with proof of payment calculated in Bitcoin and the computer ID...
Linux kernel 安全漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the netfilter subsystem in Linux kernel versions prior to 5.11.11. The...
Information Disclosure
resteasy-core is vulnerable to information disclosure. It exposes the endpoint class and method names as part of the exception response as a result of failure to convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...
UBUNTU-CVE-2021-20289
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...
CVE-2020-19625
Remote Code Execution Vulnerability in tests/support/stores/testgridfilter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter...
Remote code execution
Remote Code Execution Vulnerability in tests/support/stores/testgridfilter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter...
