The vulnerability of the Windows Hello face recognition component on Microsoft Windows operating systems allows a perpetrator to bypass security measures.

The vulnerability of the Windows Hello facial recognition component on Microsoft Windows operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to bypass security measures...

The vulnerability of the Installer component of the Google Chrome web browser allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the Installer component of the Google Chrome web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected information by opening a specially...

node-tar 路径遍历漏洞

node-tar is a software package for file compression/decompression. A path traversal vulnerability exists in node-tar, which is an arbitrary file creation/overwrite vulnerability that stems from insufficient absolute path cleanup...

Sylabs Singularity 安全特征问题漏洞

Sylabs Singularity is an open source container management platform from Sylabs, Inc. in the United States. The software supports building applications on their desktops and running hundreds or thousands of instances on any public cloud or at the compute edge. Sylabs Singularity Enterprise has a...

The vulnerability of the sshd service in the OpenSSH encryption protection mechanism allows a hacker to induce a service failure.

The vulnerability of the sshd service in the OpenSSH encryption protection mechanism is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Windows operating system’s kernel driver allows a hacker to gain increased privileges.

The vulnerability of the Windows operating system’s kernel driver mode is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Mac OS operating systems, related to deficiencies in data protection for system data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Mac OS operating systems is related to deficiencies in data protection. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain unauthorized access to protected information...

The vulnerability of the WalletService service on Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service on Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Profiles component of the Oracle Application Object Library in the Oracle E-Business Suite allows a perpetrator to access data for modification, addition, or deletion, as well as gain unauthorized access to protected information.

The vulnerability of the Profiles component of the Oracle Application Object Library in the Oracle E-Business Suite system for enterprise automation activities is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, ...

The vulnerability of NETGEAR’s Wi-Fi router software, including models D6200, D7000, R6020, R6080, R6050, and JR6150, stems from deficiencies in authentication mechanisms. This allows attackers to trigger service interruptions.

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, models D6200, D7000, R6020, R6080, R6050, and JR6150, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of Google Chrome browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s browser extensions is related to insufficient checks of the policy. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Active Directory Domain Controller (AD DC) in the Samba networking software package arises from a lack of privilege control mechanisms and access management tools. This vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Active Directory Domain Controller AD DC in the Samba networking software package is related to the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

The vulnerability of the ZyXEL P-1302-T10 v3 router’s microprogramming software, related to deficiencies in data protection, allows attackers to exploit their privileges.

The vulnerability of the ZyXEL P-1302-T10 v3 router’s microprogramming software is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the microprogrammed software of Intel Ethernet E810 controllers, related to insufficient input data verification, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Dialog Box component of the application’s technical maintenance, repair, and major equipment overhauls allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete data permissions.

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the E-Business Suite component – XDO, a software tool for creating reports with Oracle BI Publisher – allows an intruder to gain unauthorized access to protected information. This enables the intruder to read, modify, add, or delete data, or to cause service interruptions.

The vulnerability of the E-Business Suite component – XDO, a software tool for creating reports in Oracle BI Publisher – is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information, read, modify, add, or...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

Google Chrome Download Policy Enforcement Deficiency Vulnerability (CNVD-2021-17310)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A download policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to bypa...