7685 matches found
A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information.
...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets telephony module that stems from a lack of privilege checking. This could lead to the disclosure of local information without the need for additional execute privileges...
VulnCheck KEV: CVE-2022-31678
VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure...
Debian: Security Advisory (DLA-351-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-20648
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612...
CVE-2023-27478 Disclosure of unrelated data in libmemcached-awesome
libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. libmemcached could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade...
CVE-2023-27478 Disclosure of unrelated data in libmemcached-awesome
libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. libmemcached could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade...
CVE-2020-36670
The CVE-2020-36670 entry concerns the NEX-Forms plugin for WordPress up to version 7.7.1. The vulnerability stems from missing capability checks on several AJAX actions, enabling authenticated attackers with subscriber-level permissions and above to perform unauthorized data disclosure and modifi...
CVE-2023-22419
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software Former name: Koyo PLC Programming Software Version 1.6.9.0 and earlier. When processing a comment block in stage information, the end of data cannot be verified and out-of-bounds read occurs. As a result, opening a special...
Rakuraku PC Cloud Agent 信任管理问题漏洞
Rakuraku PC Cloud Agent is a cloud environment client. A security vulnerability exists in SS1 Ver.13.0.0.40 and earlier versions, Rakuraku PC Cloud Agent Ver.2.1.8 and earlier versions, which stems from the use of hard-coded credentials. An attacker could exploit the vulnerability to obtain...
JTEKT Kostac PLC Programming Software 资源管理错误漏洞
JTEKT Kostac PLC Programming Software is PLC programmer software for personal computers from JTEKT Japan. A security vulnerability exists in JTEKT Kostac PLC Programming Software version 1.6.9.0 and prior versions, which originates from memory reuse after release. An attacker could exploit the...
Vulnerabilities of FortiOS operating systems, FortiWeb network gateways for web applications, FortiSwitch Ethernet switches, and FortiProxy proxy servers, which allow attackers to disclose protected information
Vulnerabilities of FortiOS operating systems, FortiWeb network firewalls for web applications, FortiSwitch Ethernet switches, and FortiProxy proxy servers are related to improper verification of cryptographic signatures. Exploiting these vulnerabilities can allow attackers to disclose sensitive...
PT-2023-6701 · Ibm · Ibm Spectrum Virtualize
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Virtualize version 8.5 Description: The issue is related to insufficient protection of service data during the download process from Fix Central, which could lead to the disclosure of sensitive credential information under certai...
Vulnerabilities of Dell Command | Update, Dell Update, and Alienware Update programs, which allow attackers to disclose protected information
The vulnerability of the Dell Command | Update, Dell Update, and Alienware Update programs involves exposing system data that is not authorized to be exposed in a controlled area. Exploiting this vulnerability can allow an intruder to expose protected information...
The vulnerability of Microsoft Office and Microsoft 365 Apps packages, related to reading data beyond the buffer in memory, allows attackers to exploit the protected information.
The vulnerability of Microsoft Office and Microsoft 365 Apps packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information using a specially crafted file...
AZL-13723 CVE-2023-20052 affecting package clamav for versions less than 0.105.2-1
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on a...
The vulnerability of the vrend_renderer_transfer_write_iov function in the vrend_renderer.c component of the virtual OpenGL renderer Virglrenderer allows a attacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the vrendrenderertransferwriteiov function in the vrendrenderer.c component of the virtual OpenGL renderer Virglrenderer relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrit...
The vulnerability of the AMD Secure Encrypted Virtualization (SEV) technology in microprogramming software for AMD processors allows attackers to disclose protected information.
The vulnerability of AMD Secure Encrypted Virtualization SEV microprogramming software for processors is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to disclose protected information.
The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...