mariadb: server crash at Field::set_default via specially crafted SQL statements

A flaw was found in MariaDB. The component, Field::setdefault, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to cause an elevatio...

The vulnerability of Cisco IOS operating system loaders, related to security mechanism deficiencies, allows attackers to trigger service failures.

The vulnerability of Cisco IOS operating system loaders is related to security mechanisms that are flawed. Exploiting this vulnerability can allow attackers to cause service failures...

Simple Sales Management System 跨站脚本漏洞

Simple Sales Management System is a simple sales management system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Simple Sales Management System version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from phplist UK. phplist version 3.2.6 has a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

SialWeb CMS 跨站脚本漏洞

SialWeb CMS is a content management system from SialWeb Pakistan.A cross-site scripting vulnerability exists in SialWeb CMS. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

Google Android 信息泄露漏洞

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information...

HUAWEI HarmonyOS 竞争条件问题漏洞

Huawei HarmonyOS is an operating system from Huawei, China HUAWEI. Huawei HarmonyOS 2.0 is vulnerable to a contention condition issue, which stems from a conditional contention vulnerability in the kernel module and can be exploited by attackers to compromise confidentiality...

HUAWEI HarmonyOS 格式化字符串错误漏洞

HUAWEI HarmonyOS is an operating system from Huawei, China HUAWEI. HUAWEI HarmonyOS 2.0 is vulnerable to a formatting string error that can be exploited by attackers to cause usability impairments...

HUAWEI EMUI/Magic UI 安全漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI third-party pop-up override vulnerability can be exploited by attackers to cause system pop-ups to be overridden, thereby misleading users into...

Siemens Teamcenter 缓冲区错误漏洞

Siemens Teamcenter, a product lifecycle management computer software application from Siemens, Germany, is vulnerable to a buffer overflow that could be exploited by attackers to crash binaries...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

Xiaomi Content Center 安全漏洞

Xiaomi Content Center Xiaomi Content Center is a content center of Xiaomi China, Inc. An incorrect permission configuration vulnerability exists in Xiaomi Content Center APP, which is caused by the lack of proper permission validation in Xiaomi Content Center APP, and can be exploited by attacker...

Samsung SMR 输入验证错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. Samsung SMR suffers from an input validation error vulnerability that can be exploited by attackers to initiate certain activities...

Samsung SMR输入验证错误漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to an input validation error, which could be exploited by attackers to launch certain activities...

PJSIP 安全漏洞

PJSIP is a free open source multimedia communications library written in C. A denial-of-service vulnerability exists in PJSIP that could be exploited by attackers to affect PJSIP users who use PJSIP XML parsing in their applications...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a security vulnerability that stems from the disclosure of side-channel information in settings, which can be exploited by attackers to obtain sensitive information...

Microsoft HEIF Image Extensions 缓冲区错误漏洞

Microsoft HEIF Image Extensions is a feature library for Microsoft Windows systems from Microsoft Corporation USA.Microsoft HEIF Image Extensions is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code on the system...

Trend Micro Password Manager 代码问题漏洞

Trend Micro Password Manager Installer is a password manager installer from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Password Manager Installer, which can be exploited by attackers to elevate privileges on the affected machine using specially crafted files...