The vulnerability of the Yaws WebDAV server implementation lies in the improper restriction of XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Yaws WebDAV server implementation is related to XXE injections. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2021-27275

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

NETGEAR ProSAFE Network Management System 路径遍历漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A path traversal vulnerability exists in the NETGEAR ProSAFE Network Management System that could allow a remote attacker to disclose sensiti...

USN-4889-1 linux, linux-lts-xenial vulnerabilities

Adam Nichols discovered that heap overflows existed in the iSCSI subsystem in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-27365 Adam Nichols discovered that the iSCSI subsystem in the Linux kernel did not...

CVE-2021-1411

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

CVE-2019-14856

The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...

The vulnerability of the Auto-Fill function in the Google Chrome browser allows a hacker to gain access to confidential data.

The vulnerability of the Auto-Fill function in Google Chrome relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the Skia component in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Skia component in Google Chrome’s browser is related to the execution of operations that exceed the permissible buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the SMB1 protocol implementation in Samba networking software allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the `caml_ba_deserialize` function in the byterun/bigarray.c file, a programming language in OCaml. This function allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the camlbadeserialize function in the byterun/bigarray.c file written in the programming language OCaml is related to integer overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servi...

The vulnerability of the `finish_stab` function in the `stabs.c` file of the Binutils development tools, related to the operation of pushing values out of the data buffer’s acceptable range, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the finishstab function of the stabs.c file in the Binutils development tools set relates to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, an...

CVE-2020-4635

IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames...

CVE-2020-27225

It was found that the Eclipse Platform does not authenticate requests to the Help subsystem on the local web server. A local attacker could use this vulnerability to disrupt the Eclipse user's session, potentially causing Eclipse to damage or disclose data owned by that user...

wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality...

GE Grid Solutions UR 输入验证错误漏洞

GE Grid Solutions UR is an embedded operating system from GE Grid Solutions, France. It provides high-performance protection, scalable I/O, integrated monitoring and metering, high-speed communications, and extensive programming and configuration capabilities. An input validation error...

USN-4800-1 lynx vulnerabilities

It was discovered that Lynx incorrectly handled certain URLs. A remote attacker could possibly use this issue to obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM. CVE-2016-9179 It was discovered that Lynx incorrectly handled certain HTML files. A...

(Vulnerability) The vulnerability of the `show_transport_handle` function in Linux kernel allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the showtransporthandle function /scsi/scsitransportiscsi.c in the Linux operating system kernel is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the opj_get_encoding_parameters function (openjp2/pi.c) in the OpenJPEG encoding and decoding library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the opjgetencodingparameters function openjp2/pi.c in the OpenJPEG encoding and decoding library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the `Parser::makeStream` function in the Poppler PDF rendering library allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Parser::makeStream function in the Poppler PDF rendering library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the TrioParse component in the implementation of the remote desktop protocol FreeRDP allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the TrioParse component in the FreeRDP remote desktop protocol lies in its ability to read data from a buffer beyond acceptable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data and also cause service failures...