Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker could exploit this vulnerability to cause MySQL Server to hang or crash frequently and repeatedly...

Microsoft Windows Update Stack Elevation of Privilege Vulnerability

The Microsoft Windows Update Stack is part of Microsoft's USA for managing updates. A security vulnerability exists in Microsoft Windows Update Stack. An attacker could exploit the vulnerability to elevate privileges...

Microsoft DNS Server Remote Code Execution Vulnerability (CNVD-2024-36378)

Microsoft DNS Server is a service of Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft DNS Server, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Azure Kubernetes 安全漏洞

Microsoft Azure Kubernetes is a fully managed Kubernetes service from Microsoft Corporation USA. Provides serverless Kubernetes, a consolidated Continuous Integration and Continuous Delivery CI/CD experience, along with enterprise-grade security and governance. Unify development and operations...

The vulnerability of the exmode mode in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the exmode mode in the Vim text editor is related to the assignment of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21146)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. Microsoft Windows Kernel suffers from an elevation of privilege vulnerability due to a flaw in a kernel component. An attacker can exploit the vulnerability to gain SYSTEM privileges...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21151)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to elevate privileges...

PT-2024-2476 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle version 3.10.9 Description: A Cross-Site Scripting XSS issue exists due to inadequate protection of the webpage structure when handling the lang parameter in the "/?lang=" URL parameter. This could allow a remote attacker to read,...

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2024-21167)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe InDesign Input Validation Error Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

IBM Cognos Analytics Web UI Cross-Site Scripting Vulnerability (CNVD-2024-13549)

IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. A cross-site scripting vulnerability exists in the IBM Cognos Analytics Web UI, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain...

CVE-2024-31082

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

Multiple Mozilla Product Spoofing Vulnerabilities (CNVD-2024-25533)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A spoofing vulnerability exists in several Mozilla products, which is...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16936)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome that stems from an improper implementation of the Content Security Policy module. An attacker can exploit this vulnerability to bypass security restrictions...

CVE-2024-0440

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files...

TOTOLINK X5000R Denial of Service Vulnerability

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Linux kernel null pointer dereference vulnerability (CNVD-2024-45902)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Linux kernel out-of-bounds write vulnerability (CNVD-2024-45901)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause a kernel error...

Dell Unity SQL Injection Vulnerability

Dell Unity is a set of virtual Unity storage environments from Dell USA. A SQL injection vulnerability exists in Dell Unity prior to version 5.4, which stems from the inclusion of an operating system command injection vulnerability in its svccava utility. An attacker could exploit this...