Tenda AX1806 缓冲区错误漏洞

A stack overflow vulnerability exists in the Tenda AX1806 formAddMacfilterRule function, which stems from the fact that the deviceList parameter of the formAddMacfilterRule function does not check the input data for length. No details of the vulnerability are available at this time...

passport 授权问题漏洞

passport is an Express-compatible Node.js authentication middleware from Jared Hanson, an individual developer in the United States. A security vulnerability exists in passport, which stems from the fact that when a user logs in or logs out, the session is regenerated instead of being closed...

git-clone 参数注入漏洞

git-clone is a repository for cloning git repositories developed by Jason Frame in the UK. A parameter injection vulnerability exists in git-clone, which stems from an unsafe use of git's --upload-pack feature, which makes all versions of the package git-clone vulnerable to command injection...

Ping Identity Windows PingId 安全漏洞

Ping Identity Windows PingId is a software from Ping Identity USA that provides security for applications. A security vulnerability exists in Ping Identity Windows PingId versions prior to 2.8 that stems from an offline security key being used as part of authentication...

Online Railway Reservation System SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an integer overflow vulnerability that stems from improper validation of input data in the application's nsTArrayImpl::ReplaceElementsAt function, which can be exploited to...

Marval MSM 安全漏洞

Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476. An attacker has exploited the vulnerability to achieve elevation of privilege, which can be used to change the passwords of other users...

WordPress plugin Google Authenticator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of WordPress prior to Google Authenticator...

regexfn 安全漏洞

regexfn is a function that can be used for generic RegEx validation. regexfn version v1.0.5 contains a denial of service vulnerability that stems from not doing the right thing when validating crafted invalid emails, which could be exploited by an attacker to cause an application denial of servic...

todo-regex 安全漏洞

todo-regex is a regular expression used to match TODO statements in strings. todo-regex v0.1.1 is vulnerable to denial of service, which can be exploited by attackers to cause a denial of service when matching carefully crafted invalid TODO statements...

Xi S&D smarthome (smartcare) 授权问题漏洞

Xi S&D smarthome smartcare is a smart home application from Xi S&D, a South Korean company. A security vulnerability exists in S&D smarthome smartcare that stems from the presence of an incorrect authentication vulnerability, which leads to authentication bypass and information disclosure...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 8.2, which stems from a read out-of-bounds condition in vim...

Jenkins Plugin ontrack Jenkins 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins ontrack A cross-site scripting...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome that stems from insufficient data validation in the URL format...

@discordjs/opus 安全漏洞

@discordjs/opus is an open source native binding of discord.js to libopus v1.3. A security vulnerability exists in @discordjs/opus that stems from the vulnerability of this package to denial-of-service DoS attacks when attempting to encode with an encoder that has a zero-channel or an uninitializ...

CheckMK Raw Edition 安全漏洞

tribe29 CheckMK Raw Edition is a comprehensive and flexible IT monitoring system from tribe29, Germany. A security vulnerability exists in CheckMK Raw Edition that stems from a problem with permissions in the /var/lib/dpkg/info/ path. An attacker can exploit the vulnerability to change files or...

编号撤回

This CVE number has been withdrawn...

Yandex Browser 安全漏洞

Yandex Browser is a desktop version of the web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser for Windows prior to 22.3.3.684, which originates from a vulnerability that could allow a local, low-privilege attacker to execute arbitrary code with SYSTEM...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Microsoft Windows Codecs Library 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...