CVE-2022-20007

In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges neede...

CVE-2021-39700

In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Microsoft Windows Active Directory 信任管理问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Hyper-V 安全特征问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 1809 for x64-base...

Microsoft Windows Authentication Methods 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security signature issue vulnerability exists in Microsoft Windows Authentication Methods. The following products and editions are affected: Windows 10 Version 1909 for 32-bit...

Microsoft Windows Kernel 竞争条件问题漏洞

The Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A competitive conditions vulnerability exists in Microsoft Windows Kernel. The following products and versions are affected: Windows 11 for x64-based Systems, Windows 11 for ARM64-based...

Microsoft Windows Kernel 权限许可和访问控制问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Kernel with privilege permission and access control issues. The following products and versions are affected: Windows 11 for x64-based Systems,...

Microsoft Remote Desktop Client 信息泄露漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Remote Desktop Client. The following products and editions are affected: Windows 11 for ARM64-based Systems,Windows Server 2022,Windows Server 202...

PT-2022-15443 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM InfoSphere Information...

Microsoft Remote Desktop Client 输入验证错误漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Remote Desktop Client. The following products and versions are affected: Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Remot...

CVE-2021-27760

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code...

CVE-2022-21934

Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2...

CVE-2022-28076

Seacms v11.6 was discovered to contain a remote command execution RCE vulnerability via the Mail Server Settings...

SeaCMS 安全漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 11.6, which stems from the discovery of a Remote Command Execution RCE vulnerability containing a...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking, and can be exploited by an attacker to disclose local information. The following products and versions are...

多款MediaTek产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A security vulnerability exists in various MediaTek products, which stems from an integer overflow that may cause an application to crash and can be exploited by an attacker to cause a local denial of service. Th...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking, and can be exploited by an attacker to disclose local information. The following products and versions are...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking, which may result in out-of-bounds reads that can be exploited by an attacker to disclose local information...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper input validation, which may result in an out-of-bounds write and can be exploited by an attacker to cause an escalation of local...

MediaTek Ccu缓冲区错误漏洞

MediaTek Ccu is a camera control processor from China-based MediaTek. A security vulnerability exists in the MediaTek Ccu, which stems from a lack of boundary checking, which may allow out-of-bounds writes, and can be exploited by an attacker to cause a local privilege escalation. The following...