Design/Logic Flaw

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

Design/Logic Flaw

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

Design/Logic Flaw

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

Design/Logic Flaw

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2...

Design/Logic Flaw

xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

KiCad Eda buffer error vulnerability

KiCad Eda is a cross-platform and open source electronic design automation suite from the KiCad community. KiCad EDA is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker with a specially crafted gerber or excellon file to cause code execution...

Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2022-16292)

Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to cross-site request forgery, which is caused by improper design or implementation during the development of code for a web-based system or product. No detailed vulnerability details are...

Design/Logic Flaw

A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified database via JDBC using attacker-specified credentials...

Design/Logic Flaw

CobaltStrike =4.5 HTTPS listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL...

Crossbeam race condition issue

crossbeam is a tool for individual developers that applies to concurrent programming. A competitive conditions issue vulnerability exists in crossbeam that arises from improper design or implementation during code development of a networked system or product...

Design/Logic Flaw

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

Atlassian Jira Cross-Site Request Forgery Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to cross-site request forgery, which is caused by improper design or implementation during the development of code for a web-based system or product. No detailed vulnerability details are...

AntD Admin Access Control Vulnerability

AntD Admin is an excellent front-end solution for enterprise applications built on Ant Design and UmiJs by Zuiidea individual developers. A security vulnerability exists in AntD Admin, which originates from Antd-admin 5.5.0 is affected by a False Access Control vulnerability. An attacker can...

Google Golang memory consumption overflow vulnerability

Google Golang is a statically strongly typed, compiled language from Google, Inc. A memory consumption overflow vulnerability exists in Google Golang, which stems from a design or implementation impropriety in the code development process of a web-based system or product. An attacker could exploi...

Design/Logic Flaw

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page...

Design/Logic Flaw

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures...