IOBit Advanced SystemCare 安全漏洞

Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing and optimizing your system, among other things. IOBit Advanced SystemCare Ultimate has a security vulnerability. A specially crafted I/O...

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the repeated release of the memory area, enabling a hacker to access sensitive information.

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console-based image editing tool ImageMagick is related to the repeated release of a memory area. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability of the fly-admin-gmc-se graphical control console arises from insufficient validation of input data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of the fly-admin-gmc-se graphical control console is related to insufficient validation of input data during the editing of category names. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

PT-2021-7717 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the dhcp reply function of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data, compromise its integrity, and...

CVE-2021-20379

IBM Guardium Data Encryption GDE 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711...

The vulnerability of Intel microprogramming software, related to security configuration errors, allows attackers to disclose protected information.

The vulnerability of Intel microprogramming software is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

The vulnerability of the ReadMATImageV4 function in the coders/mat.c component of the console-based ImageMagick graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadMATImageV4 function in the ImageMagick console graphics editor’s coders/mat.c component is related to the use of previously uninitialized variables. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cau...

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation emulator is related to a lack of mechanism for controlling code generation. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation software is related to the lack of restrictions on instruction size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

Mitsubishi Electric Air Conditioning Systems

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: Multiple Air Conditioning Systems Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability may...

华为智能手机安全漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in a number of Huawei SmartPhones, which stems from a lack of effective permissions licensing and access control measures in the product. The vulnerability can be exploited by an attacker to cause the...

Sloan SmartFaucets 授权问题漏洞

Sloan SmartFaucets is a smart faucet from Sloan that makes water management easy. A security vulnerability exists in Sloan SmartFaucets that stems from the presence of unauthenticated BLE interfaces in SmartFaucets, including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS...

CVE-2021-28573

Adobe Animate version 21.0.5 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue require...

The vulnerability of the xen-netback component in the Linux operating system allows a hacker to increase their privileges or expose sensitive information.

The vulnerability of the xen-netback component in the Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges or disclose sensitive information...

The vulnerability of Huawei’s microprogrammed router software arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Huawei’s microprogrammed router software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the system...

CVE-2021-24000

A race condition with requestPointerLock and setTimeout could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements such as input type="file" this could have led to an attack where a user was confused about the origin...

CVE-2021-24000

A race condition with requestPointerLock and setTimeout could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements such as input type="file" this could have led to an attack where a user was confused about the origin...

Amazon Linux 2 : systemd, --advisory ALAS2-2021-1647 (ALAS-2021-1647)

The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1647 advisory. It was discovered that systemd is vulnerable to a state injection attack when deserializing the state of a service...

HPE OneView Global Dashboard和HPE OneView 安全漏洞

HPE OneView Global Dashboard OVGD and HPE OneView are both products of Hewlett Packard Enterprise hpe. hpe OneView Global Dashboard is a suite of dashboard solutions. hpe OneView is software that facilitates automated device management for IT departments. A security vulnerability exists in HPE...

SonicWall SonicOS Buffer Overflow (SNWLID-2021-0006)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a buffer overflow vulnerability. A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted unauthenticated HTTP request. This can...