16480 matches found
Heap overflow
Heap buffer overflow in the URLGetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
LSN-0081-1: Kernel Live Patch Security Notice
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory.CVE-2021-3653 Maxim...
KLA12280 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Stack buffer overflow vulnerability in ANGLE can be exploited t...
PT-2021-18898
Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.6 macOS Catalina versions prior to Security Update 2021-005 Description A URI parsing issue was addressed with improved parsing, which could allow a local user to execute arbitrary files. Recommendations For...
Cross-site Scripting (XSS)
WordPress is vulnerable to Cross-site Scripting XSS. The issue allows an authenticated but low-privileged user like contributor/author to execute XSS in the editor. This bypasses the restrictions imposed on users who do not have the permission to post unfilteredhtml...
Delta Electronics DOPSoft 2 Out-of-Bounds Write Vulnerability
Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. An out-of-bounds write vulnerability exists in Delta Electronics DOPSoft 2, which can be exploited by an attacker to execute code in the context of the current process...
Stack overflow
A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74051)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via a specially crafted payload in the user name field...
PT-2021-27756
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes ZEND FETCH OBJ R SPEC CV CONST INLINE HANDLER and ZEND FETCH OBJ R SPEC CV...
CVE-2021-25456
OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...
Atlassian Confluence WebWork OGNL Injection
This module exploits an OGNL injection in Atlassian Confluence's WebWork component to execute commands as the Tomcat user. Module Options msf use exploit/linux/http/atlassianconfluencewebworkognlinjection msf exploitatlassianconfluencewebworkognlinjection show targets ...targets... msf...
dotCMS file upload vulnerability
dotCMS is a powerful Java-based content management system CMS. dotCMS 5.2.3 and earlier versions are vulnerable to file uploads. A remote attacker can exploit this vulnerability to execute arbitrary code via /src/main/java/com/dotmarketing/filters/CMSFilter.java...
PT-2021-13780
Name of the Vulnerable Software and Affected Versions: Nessus Agent versions 8.3.0 and earlier Description: A local privilege escalation issue was discovered, allowing an authenticated, local administrator to execute specific executables on the host. Recommendations: For Nessus Agent versions 8.3...
PT-2021-13781
Name of the Vulnerable Software and Affected Versions: Nessus Agent versions 8.3.0 and earlier Description: A local privilege escalation issue was discovered, allowing an authenticated, local administrator to execute specific executables on the host. Recommendations: For Nessus Agent versions 8.3...
QNAP NAS buffer error vulnerability
QNAP NAS is an accessible and fast storage solution from QNAP China. A security vulnerability exists in QNAP NAS that stems from a boundary error. A remote, unauthenticated attacker could send a specially crafted request to trigger a stack-based buffer overflow and execute arbitrary code on the...
Vulnerabilities fixed in Citrix Hypervisor
Vulnerabilities have been fixed in the Citrix Hypervisor. The vulnerabilities allow a malicious person with administrator privileges within the guest VM to cause a denial-of-service on the host and execute arbitrary code. Citrix has released updates to fix the vulnerabilities. More information ca...
CVE-2021-30717
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to execute arbitrary code...
CVE-2021-30655
An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic...
CVE-2021-1812
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to execute arbitrary code with system privileges...