Vulnerabilities (CVE)

Filtered by CWE-667
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12658 2 Debian, Gssproxy Project 2 Debian Linux, Gssproxy 2021-02-08 7.5 HIGH 9.8 CRITICAL
** DISPUTED ** gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem."
CVE-2019-5886 1 Shopxo 1 Shopxo 2020-08-24 7.5 HIGH 9.8 CRITICAL
An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lock file in the Add method, which allows an attacker to reinstall the database. The attacker can write arbitrary code to database.php during system reinstallation.