Adobe Audition 缓冲区错误漏洞

Adobe Audition is an audio editor and post-production suite. Adobe Audition 14.4 and earlier versions contain an arbitrary code execution vulnerability that could be exploited by attackers to execute arbitrary code...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to send...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. An unspecified vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to compromise MySQL Server by accessing the network via multiple protocols...

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Reader because the product's printing method does not properly validate user-entered formatting descriptors. The vulnerability can be exploited to cause malicious code to be executed ...

IBM Cognos Analytics 安全漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation that provides valuable information, secure data governance and reporting. An attacker could use this vulnerability to gain unauthorized access to the "New Job" page...

编号撤回

This CVE number has been withdrawn...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. No further information about this vulnerabilit...

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2016 32-bit edition,Microsoft Office 2016 64-bit...

ProjectSend 路径遍历漏洞

A directory traversal vulnerability exists in ProjectSend version r1295, a free, customer-facing private file sharing Web application. The vulnerability stems from a lack of validation of the input to the files parameter. An attacker could exploit the vulnerability by adding ... /upload/files/...

MediaWiki 跨站脚本漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki that allows injection and execution of HTML and...

HUAWEI HarmonyOS 信息泄露漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS contains a security vulnerability that could be exploited by attackers to compromise confidentiality...

Zulip server 安全漏洞

Zulip server is an open source team chat application from Zulip, Inc. in the United States. Zulip server has a security vulnerability that allows administrators of malicious organizations to subject the server to a denial of service via a regular expression complexity attack...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Mediatek 芯片 资源管理错误漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chips, which stems from a possible memory corruption due to the use of m4u after its release, which could result in a local elevation of privilege that requires system execution...

编号撤回

This CVE number has been withdrawn...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Task Manager. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

libslax 缓冲区错误漏洞

libslax is an open source implementation of the SLAX language. libslax suffers from a buffer overflow vulnerability, which stems from slaxIsCommentStart in slaxlexer.c having a heap-based buffer overflow. No detailed vulnerability details are currently available...

Swftools 代码问题漏洞

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Sela 缓冲区错误漏洞

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

SUSE Linux Enterprise Server 代码问题漏洞

SUSE Linux Enterprise Server is a suite of enterprise server edition Linux operating systems from SUSE Germany. A code issue vulnerability exists in SUSE Linux Enterprise Server that stems from the product's failure to properly handle service responses. An attacker could cause a denial of service...