LZ4 输入验证错误漏洞

LZ4 is a lossless compression algorithm. LZ4 1:1.9.3-1 suffers from an input validation error vulnerability that stems from potential memory corruption due to an integer overflow bug that causes a memmove parameter to become negative...

Apache Superset Input Validation Error Vulnerability

Apache Superset up is the United States Apache company to provide a large distributed environment in the horizontal scaling design applications. An input validation error vulnerability exists in Apache Superset 1.0.1 and earlier versions, which arises from unchecked user input that opens a redire...

IBM Spectrum Scale File Overwrite Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

SuiteCRM Log File Remote Code Execution

This module exploits an input validation error on the log file extension parameter. It does not properly validate upper/lower case characters. Once this occurs, the application log file will be treated as a php file. The log file can then be populated with php code by changing the username of a...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which stems from insufficient validation of user-supplied input within the ImageIO component. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

Subreddit Home Automation 输入验证错误漏洞

Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A security vulnerability exists in HomeAutomation 3.3.2, which stems from the input passed in the redirect GET parameter in the api.php script not being properly validated before it is used...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in sldnsstr2wirednamebuforigin in versions of Unbound prior to 1.9.5. An attacker could exploit this vulnerability to cause an out-of-bounds write...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in respip/respip.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

Cisco SD-WAN vManage Input Validation Error Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage Software has an input validation error vulnerability that originates as a result of insufficient authorization checks. ...

亚马逊 Amazon FreeRTOS 输入验证错误漏洞

Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An integer overflow vulnerability exists in streambuffer.c in Amazon FreeRTOS versions prior to 10.4.3. No details of the vulnerability are provided at this time...

Github authelia input validation error vulnerability

Github authelia is an application from Github USA. An open source authentication and authorization server that provides 2-factor authentication and single sign-on SSO to applications through a web portal. Authelia version 4.27.4 and prior versions contain an input validation error vulnerability...

Oracle VM VirtualBox Input Validation Error Vulnerability (CNVD-2021-30028)

Oracle VM VirtualBox is a virtual machine management software from Oracle. Oracle VM VirtualBox suffers from an input validation error vulnerability that stems from an input validation error in the core components of Oracle VM VirtualBox. No detailed vulnerability details are provided at this tim...

Oracle VM VirtualBox Input Validation Error Vulnerability (CNVD-2021-30023)

Oracle VM VirtualBox is a powerful cross-platform virtualization software for x86 systems. Oracle VM VirtualBox is vulnerable to an input validation error vulnerability that stems from an input validation error in the Oracle VM VirtualBox core component. No detailed vulnerability details are...

Multiple Mozilla Products Input Validation Error Vulnerability

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An input validation error vulnerability exists in multiple Mozilla products,...

Oracle VM VirtualBox Input Validation Error Vulnerability (CNVD-2021-30032)

Oracle VM VirtualBox is a virtual machine management software from Oracle. Oracle VM VirtualBox suffers from an input validation error vulnerability that stems from an input validation error in the core components of Oracle VM VirtualBox. No detailed vulnerability details are provided at this tim...

Oracle Database Server Input Validation Error Vulnerability (CNVD-2021-33858)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An input validation error vulnerability exists in Oracle Database Server that stems fro...

Oracle Database Server Input Validation Error Vulnerability (CNVD-2021-33860)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An input validation error vulnerability exists in Oracle Database Server 12.1.0.2,...