PT-2021-23945 · Vercel · Next.Js

Name of the Vulnerable Software and Affected Versions: Next.js versions prior to 12.0.5 Next.js versions prior to 11.1.3 Description: The issue arises when invalid or malformed URLs are processed, potentially leading to a server crash. This can occur in deployments using Next.js versions above...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. Apple macOS suffers from a Permission Grant and Access Control Issue vulnerability that originates from a person with physical access to an iOS device being able to access contacts on the lock scree...

CVE-2020-13349

Removed by vendor...

CVE-2020-13345

Removed by vendor...

PT-2020-9980 · D Link · D-Link Dap-1360

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 revision F versions 609EU through 613EUbeta D-Link DAP-1360 revision F versions through 6.12b01 Description: An issue was discovered on D-Link DAP-1360 revision F devices, allowing remote attackers to start a telnet service...

kernel: ppc: unrelated processes being able to read/write to each other's virtual memory

A flaw was found in the way the Linux kernel's memory subsystem on certain 64-bit PowerPCs with the hash page table MMU handled memory above 512TB. A local, unprivileged user could use this flaw to escalate their privileges on the system...

UBUNTU-CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net

! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...

Heavens-Above - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Heavens-Above published at the 'play' market has multiple vulnerabilities...

Unfixed XSS vulnerability at above-technology.com

Security researcher ToPN1K, has submitted on 11/07/2009 a cross-site-scripting XSS vulnerability affecting above-technology.com, which at the time of submission ranked 4275745 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description PCRE contains a buffer overflow vulnerability when processing a character class containing a very large number of characters with codepoints greater than 255. Impact A remote attacker could...

PT-1999-1449 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: The issue is related to the genfilt component in the AIX Packet Filtering Module, which fails to properly filter traffic destined for ports greater than 32767. Recommendations: At the moment,...