Adobe Photoshop Information Disclosure Vulnerability

Adobe Photoshop is an application developed and distributed by Adobe for image processing. Adobe Photoshop suffers from an information leakage vulnerability, which acquires sensitive information that can be further read out of bounds. An attacker can exploit this vulnerability to obtain sensitive...

QEMU Pointer Swapping DoS

The vulnerability of the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

Genesys PureConnect cross-site scripting vulnerability

Genesys PureConnect is an all-in-one omni-channel contact center and communications solution from Genesys Corporation. A security vulnerability exists in Genesys PureConnect Interaction Web Tools Chat. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a configuration flaw. An attacker exploited the vulnerability to cause availability to...

AZL-10819 CVE-2022-1271 affecting package gzip for versions less than 1.12-1

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...

CVE-2022-1016

A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker...

AVEVA Edge SCADA Code Execution

The vulnerability of the AVEVA Edge SCADA system is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Gas Agency Management System SQL Injection Vulnerability

Gas Agency Management System is a gas agency management software by Mayuri K. Personal Developer. It is used to manage the daily operations of a gas agency. A SQL injection vulnerability exists in Gas Agency Management System. An attacker can exploit this vulnerability by manipulating the paramet...

Apartment Visitor Management System Cross-site Scripting Vulnerability

Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Apartment Visitor Management System. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

Adobe Acrobat Reader input validation error vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. An input validation error vulnerability exists in Adobe Acrobat Reader that stems from improper input validation and can be exploited by an attacker to cause a memor...

CVE-2022-26009

A stack-based buffer overflow vulnerability exists in the confsrv ucloudsetnodelocation functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-24029

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

Google Android elevation of privilege vulnerability (CNVD-2022-65631)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to cause an elevatio...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from the American company Google Google. There is a security vulnerability in the Google Pixel kernel that stems from a vulnerability that can be exploited by an attacker to cause elevation of privilege...

Google Pixel resource management error vulnerability

Google Pixel is a smartphone from the American company Google Google. There is a security vulnerability in the Google Pixel kernel that stems from a vulnerability that can be exploited by an attacker to cause elevation of privilege...

CVE-2022-2294

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability will allow an attacker to exploit a heap corruption via a crafted HTML page by convincing an user to install a malicious extension...

PT-2022-21608 · Hicos · Hicos

Name of the Vulnerable Software and Affected Versions: HiCOS client-side citizen digital certificate component affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability in the client-side citizen digital certificate component when reading an IC card, du...

Cross-site scripting vulnerabilities

outline is an American outline open source used to provide the fastest wiki and knowledge base for growing teams . A cross-site scripting vulnerability exists in versions prior to outline v0.64.4. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...