For individuals

INPRAX "iZZi connect" application on Android contains hard-coded MQTT queue credentials. The same MQTT queue is used by corresponding physical recuperation devices. Exploiting this vulnerability...

ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a...

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted...

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can...

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use...

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021.