Adobe InDesign 缓冲区错误漏洞

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds write vulnerability that could be exploited by an attacker to cause arbitrary code to be executed in the context of the current user...

CScms SQL注入漏洞

CScms is a content management system CMS developed on the CI framework. cscms has a security vulnerability that stems from cscms v4.1 allowing SQL injection via the "page delete" function. No details of the vulnerability are available...

nodejs 信任管理问题漏洞

nodejs is a JavaScript runtime environment based on the ChromeV8 engine by wrapping the Chromev8 engine as well as using event-driven and non-blocking IO applications to make the development of high-performance background applications in Javascript possible. There is a trust management issue...

Vim 资源管理错误漏洞

Vim, a UNIX-based editor, is vulnerable to a resource management error that stems from a heap-based buffer overflow. No detailed vulnerability details are currently available...

编号撤回

This CVE number has been withdrawn...

libde265 安全漏洞

Libde265 is a German h.265 video codec. libde265 suffers from a security vulnerability that could be exploited by an attacker to cause a denial of service DoS by running a crafted file or application with unspecified other impact...

Sourcecodester Vehicle Service Management System 安全漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System has an elevation of privilege vulnerability that could be exploited by attackers to access...

Huawei HarmonyOS 缓冲区错误漏洞

HarmonyOS Wearables is an electronic watch operating system from Huawei, a Chinese company. HarmonyOS Wearables suffers from an out-of-bounds write vulnerability that originates from an out-of-bounds write in the aod module of HarmonyOS, which can be exploited by an attacker to cause a system...

Ws Scrcpy 安全漏洞

Ws Scrcpy is a web client for Genymobile/Scrcpy and others. A security vulnerability exists in Ws Scrcpy that stems from the fact that ws-scrcpy is susceptible to external control of file names or paths...

showdoc 安全漏洞

ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust tremor-script crate versions prior to 0.11.6 that can lead to resource management errors...

Rust binjs_io crate 安全漏洞

Rust binjsio crate is a domain-specific encoding. A security vulnerability exists in Rust binjsio crate in versions prior to 2021-01-03, which stems from the fact that it can read data from uninitialized memory locations...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust mopa crate A security vulnerability exists in versions prior to 2021-06-01, which could lead to arbitrary code execution or ASLR bypass by an attacker...

Netgear NETGEAR 安全漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR devices that stems from a security setting error. The following products and versions are affected...

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from the fact that some NETGEAR devices are subject to command back...

编号撤回

This CVE number has been withdrawn...

gpac 安全漏洞

GPAC is an open source multimedia framework. gflog function in GPAC version 1.1.0 has an infinite loop vulnerability that can be exploited by attackers to cause a denial of service...

Adobe Lightroom Classic 资源管理错误漏洞

Adobe Lightroom Classic is a suite of graphics processing software from the American company Audobee Adobe. Adobe Lightroom has a security vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

AnonAddy 加密问题漏洞

AnonAddy is an anonymous email forwarding system from AnonAddy, Inc. A security vulnerability exists in AnonAddy that stems from the presence of a corrupt or risky encryption algorithm in VerificationController.php in AnonAddy...

Google Android 访问控制错误漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an access control error that could be exploited by attackers to cause a local privilege escalation without additional execution privileges...