Bootstrap 跨站脚本漏洞

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript. A cross-site scripting vulnerability exists in Bootstrap Package, which stems from insufficient harmless handling of user-supplied data. The following products and versions are affected: Bootstrap Packag...

jansson 缓冲区错误漏洞

Jansson is a C library for encoding, decoding and manipulating JSON data. An out-of-bounds memory read vulnerability exists in Jansson 2.13.1 and earlier versions. The vulnerability stems from a parsing error in jsonloads. No details of the vulnerability are provided at this time...

HedgeDoc 路径遍历漏洞

HedgeDoc is a Javascript-based real-time editing and sharing platform for Markdown documents from the HedgeDoc team. A path traversal vulnerability exists in HedgeDoc, which allows an attacker to read an arbitrary .md file from the server's filesystem to perform relative path traversal...

Mozilla Thunderbird 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability, which can be exploited by remote attackers to cause the browser to crash...

jose 安全漏洞

npm jose is an application from the U.S. company npm. Use native encryption runtime does not depend on the item JWA, JWS, JWE, JWT, JWK. A security vulnerability exists in npm jose that stems from a possible timing difference when a padding error occurs while decrypting a ciphertext. No detailed...

Google Chrome 信息泄露漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability that can be exploited by remote attackers to perform Denial of Service DoS attacks...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge inherently suffers from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain sensitive information...

ZTE 多款产品跨站请求伪造漏洞

The ZTE H168N is a router from the Chinese company ZTE ZTE. A security vulnerability exists in several ZTE products, where an attacker can construct messages to perform unauthorized operations. The following products and versions are affected: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N...

编号撤回

This CVE number has been withdrawn...

Micro Focus Operations Bridge Manager 授权问题漏洞

Micro Focus Operations Bridge Manager is a universal event correlation software that uses IT topology to automatically correlate related events, allowing you to identify root causes faster and easier. An authentication bypass vulnerability exists in Micro Focus Operations Bridge Manager versions...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a string entered by the user. A...

Huawei Emui 安全漏洞

Huawei Emui is an Android-based mobile operating system developed by Chinese company Huawei. A security vulnerability exists in Huawei Emui, which can be exploited by local attackers to cause memory leakage and doS attacks...

Grandstream GRP261x VoIP phone 访问控制错误漏洞

The Grandstream GRP261x VoIP phone is an IP phone from Grandstream USA. A carrier-grade IP phone designed for large-scale deployments. A security vulnerability exists in the Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 that allows authentication bypass in its administration web...

OAuth2-Proxy 访问控制错误漏洞

OAuth2 Proxy is a reverse proxy that provides authentication with Google, Github or other providers. OAuth2 Proxy suffers from an access control error vulnerability that stems from the fact that none of the authorizations are restricted. No details of the vulnerability are available at this time...

qianjunakasumi kongchuanhujiao 授权问题漏洞

qianjunakasumi kongchuanhujiao is qianjunakasumi an open source application . An online teaching quiz statistics deep learning analytics system . A security vulnerability exists in github.com/kongchuanhujiao/server before version 1.3.21, which stems from an authentication bypass...

Lxml 跨站脚本漏洞

Lxml is a software from the individual developers of Lxml that can interact with Python for locating elements in Html. A cross-site scripting vulnerability exists in lxml 4.6.2, which stems from the HTML5 formaction attribute...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 89.0.4389.90. No detailed vulnerability details are provided at this time...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

Siemens SIMATIC 代码问题漏洞

Siemens SIMATIC is a configuration software from Siemens. A code issue vulnerability exists in Siemens SIMATIC, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...