Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-78383)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

IBM Aspera Faspex Security Bypass Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A security bypass vulnerability exists in IBM Aspera Faspex, which can be exploited by attackers to bypass IP restrictions...

TP-LINK Archer AX50/A10 Command Execution Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A command execution vulnerability exists in firmware versions prior to TP-LINK Archer AX50JPV1230529, Archer A10JPV2230504, which stems from an application failing to correctly filter constructed command special characters, command...

Adobe Media Encoder Buffer Overflow Vulnerability (CNVD-2023-82287)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerabilit...

Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-72138)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

Command Execution Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. A command execution vulnerability exists in the DSS Safe City System of Zhejiang Dahua Technology Company Limited, which can be exploited by an attacker to execute arbitrary commands...

FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates from a boundary error in the ncrushdecompress function when handling untrusted input. A remote attacker could exploit the...

Mozilla Firefox Code Problem Vulnerability (CNVD-2023-75344)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code issue vulnerability that stems from a potentially exploitable crash that can be exploited by an attacker to cause a use-after-release when receiving rendered data vi...

tenda AC6 Buffer Overflow Vulnerability (CNVD-2023-68221)

The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version V15.03.05.16, which is caused by the sub90998 function failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute...

Google Chrome MediaStream Memory Misreference Vulnerability (CNVD-2023-69036)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome MediaStream. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause an application to crash...

ImageMagick Denial of Service Vulnerability (CNVD-2023-68224)

ImageMagick is a set of open source image processing software from the American company ImageMagick. The software can read, convert or write images in a variety of formats. A denial of service vulnerability exists in ImageMagick version 7.1.0-4, which stems from a divide-by-zero issue in the...

Exiv2 buffer overflow vulnerability (CNVD-2023-68223)

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in Exiv2 version 0.27.1, which stems from a boundary...

Unspecified Vulnerability in Google Chrome (CNVD-2023-69037)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that can be exploited by an attacker to perform OS-level privilege escalation via a malicious file...

IBM Security Guardium Data Encryption Access Control Error Vulnerability

IBM Security Guardium Data Encryption is a software from International Business Machines IBM that is used to secure sensitive data within an organization. The software protects assets located in cloud, virtual, big data and physical environments by controlling access to databases, files,...

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2023-68209)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A memory misreference vulnerability exists in versions of Mozilla Firefox prior to 106, which arises from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploi...

Command Execution Vulnerability in WPS Windows Edition of Zhuhai Kingsoft Office Software Co.

WPS is an office software. A command execution vulnerability exists in WPS Windows Edition of Zhuhai Kingsoft Office Software Limited, which can be exploited by attackers to execute arbitrary code...

QQ Music Command Execution Vulnerability

QQ Music is the official music playback software from Tencent. A command execution vulnerability exists in QQ Music, which can be exploited by an attacker to execute arbitrary commands...

Information Leakage Vulnerability in Renzi's Next-Generation Firewalls

Ltd. is one of the earliest enterprises in China to be involved in the field of network information security, and is committed to providing overall solutions for network auditing and supervision for state management organizations, operators, enterprises and institutions. An information leakage...

Smartbi windowUnloading Authentication Bypass Vulnerability

Smartbi is a one-stop big data analytics platform. An authentication bypass vulnerability exists in Smartbi windowUnloading, which can be exploited by an attacker to obtain system user credentials and execute remote code...

FreeImage ofLoad function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage ofLoad function, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service attack...