HexoEditor 跨站脚本漏洞

HexoEditor is an open source Markdown a markup language that can be written using a normal text editor editor optimized for Hexo a blogging framework. HexoEditor 1.1.8 contains a cross-site scripting vulnerability that can be exploited to place a common cross-site scripting payload into a...

PSR-7 Message Implementation 输入验证错误漏洞

PSR-7 Message Implementation is a complete PSR-7 message implementation. An input validation error vulnerability exists in PSR-7 Message Implementation version 1.8.3 and earlier and in psr7 from version 2.0.0 through 2.1.0. An attacker can add a new line of characters and pass untrusted values...

node-ipc 安全漏洞

node-ipc is a node.js module from the individual developer Brandon Nozaki Miller in the United States. It is used for local and remote inter-process communication and fully supports Linux, Mac and Windows. A security vulnerability exists in node-ipc version 10.1.1 up to and including 10.1.3. The...

showdoc 跨站脚本漏洞

showdoc is open source and a great tool for IT teams to share documents online. showdoc has a security vulnerability and no details of the vulnerability are currently available...

编号撤回

This CVE number has been withdrawn...

SAP Business Objects Business Intelligence Platform 信息泄露漏洞

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An information disclosure vulnerability exists in SAP Business Object...

AllTube Download 代码问题漏洞

AllTube Download is a Youtube-dl Web Gui by Pierre Rudloff, an individual developer. AllTube Download suffers from a code issue vulnerability that stems from the fact that cross-site request forgery attacks can only occur on the HTML frontend of youtube-dl when Alltube has the "stream" option...

Lenovo Glance 安全漏洞

Lenovo Glance is an IR camera software from CHN Lenovo Lenovo. Uses the IR camera to provide functionality, such as alerting you when someone scans the screen behind you. A security vulnerability exists in Lenovo Glance by Mirametrix that allows a local attacker to exploit the vulnerability for...

Github regex 资源管理错误漏洞

Github regex is a Rust library for parsing, compiling, and executing regular expressions. A security vulnerability exists in regex that stems from a denial-of-service attack caused by an untrusted regex or untrusted input matched by a trusted regex...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. ok-file-formats suffers from a buffer overflow vulnerability that stems from a heap buffer overflow in the function "/okpng.c" when using functions from the ok-file-formats project. function okpngreaddata...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability that can be exploited by attackers to bypass security restrictions...

Daniel Kamil Kozar tsMuxer 输入验证错误漏洞

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. A security vulnerability exists in tsMuxer git-2678966, which stems from an integer overflow issue in DTSStreamReader::findFrame, which allows an attacker...

编号撤回

This CVE number has been withdrawn...

Home Owners Collection Management System 安全漏洞

Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...

HashiCorp Consul 资源管理错误漏洞

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A resource management error vulnerability exists in HashiCorp Consul and Consul...

DELL BSAFE SSL-J 安全漏洞

DELL BSAFE is a security software product from Dell USA that supports cryptographic algorithms, certificate chain validation, and Transport Layer Security TLS encryption suite, among others, in order to help users achieve a variety of security goals for their applications. A security vulnerabilit...

Envoy 安全漏洞

Envoy is an open source distributed proxy server. Envoy has a security vulnerability that can be exploited by attackers to cause stack exhaustion and abnormal process termination...

编号撤回

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...