|
207481
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
i2c: xiic: fix reference leak when pm_runtime_get_sync fails
The PM reference count is not expected to be incremented on
return i…
|
-
|
CVE-2020-36778
|
2024-11-21 14:30 |
2024-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207482
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
media: aspeed: fix clock handling logic
Video engine uses eclk and vclk for its clock sources and its reset
control is coupled wi…
|
-
|
CVE-2020-36787
|
2024-11-21 14:30 |
2024-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207483
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
media: dvbdev: Fix memory leak in dvb_media_device_free()
dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn`…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-36777
|
2024-11-21 14:30 |
2024-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207484
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/cpufreq_cooling: Fix slab OOB issue
Slab OOB issue is scanned by KASAN in cpu_power_to_freq().
If power is limite…
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-36776
|
2024-11-21 14:30 |
2024-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207485
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid potential deadlock
Using f2fs_trylock_op() in f2fs_write_compressed_pages() to avoid potential
deadlock like w…
|
CWE-667
Improper Locking
|
CVE-2020-36775
|
2024-11-21 14:30 |
2024-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207486
|
- |
|
-
|
-
|
plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).
|
-
|
CVE-2020-36774
|
2024-11-21 14:30 |
2024-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207487
|
9.8 |
CRITICAL
Network
|
artifex
|
ghostscript
|
Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one …
|
CWE-787
CWE-416
Out-of-bounds Write
Use After Free
|
CVE-2020-36773
|
2024-11-21 14:30 |
2024-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207488
|
4.4 |
MEDIUM
Local
|
cloudlinux
|
cagefs
|
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outsid…
|
CWE-610
Externally Controlled Reference to a Resource in Another Sphere
|
CVE-2020-36772
|
2024-11-21 14:30 |
2024-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207489
|
7.8 |
HIGH
Local
|
cloudlinux
|
cagefs
|
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and…
|
NVD-CWE-noinfo
|
CVE-2020-36771
|
2024-11-21 14:30 |
2024-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207490
|
9.8 |
CRITICAL
Network
|
gentoo
|
ebuild_for_slurm
|
pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on files in the live root filesystem. This could be exploited by the slurm user to bec…
|
NVD-CWE-noinfo
|
CVE-2020-36770
|
2024-11-21 14:30 |
2024-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
