11266 matches found
MediaTek 芯片安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. The MediaTek chips are affected by a security vulnerability that stems from a lack of privilege checking, which can be exploited by an attacker to cause a local privilege escalation. The following products and versio...
MediaTek 芯片 竞争条件问题漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which can be exploited by attackers to disclose local information. The following products and versions are affected: chips, MT6580, MT6739, MT6761, MT6762...
MediaTek imgsensor 缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek imgsensor, which stems from a lack of bounds checking, and may result in out-of-bounds writes, which can be exploited by an attacker to cause a local privilege...
MediaTek 芯片资源管理错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which can be exploited by attackers to cause a local privilege escalation. mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163...
MediaTek 芯片路径遍历漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which is rooted in path traversal, and can be exploited by an attacker to disclose local information. The following products and versions are affected:...
MediaTek 多款产品安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek component aee driver, which can be exploited by attackers to cause a local privilege escalation. The following products and versions are affected: chips, MT6580, MT6731...
MediaTek netdiag 后置链接漏洞
MediaTek netdiag is an application chip from MediaTek China. Improved processing capabilities. A security vulnerability exists in the MediaTek component netdiag, which can be exploited by attackers to cause a local privilege escalation. The following products and versions are affected: chips,...
MediaTek aee driver 资源管理错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek component aee driver, which can be exploited by attackers to cause a local privilege escalation. The following products and versions are affected: chips, MT6580, MT6731...
MediaTek 芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek component aee daemon, which stems from a lack of privilege checking, and can be exploited by an attacker to cause a local information disclosure. The following products...
MediaTek 芯片缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking, which may result in out-of-bounds writes, and can be exploited by an attacker to cause an escalation of loca...
GitLab 信息泄露漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An information disclosure vulnerability exists in Gitlab Community Edition...
MediaTek 芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A security vulnerability exists in the MediaTek chips, which stems from improper access control and can be exploited by attackers to disclose local information. The following products and versions are affected:...
CVE-2022-29849
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android prior to System 10, 11, 12, and 12L...
CVE-2021-36207
Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...
Libmobi 缓冲区错误漏洞
Libmobi is a C library . It is used to process documents in the Mobipocket/Kindle MOBI e-book format. A security vulnerability exists in Libmobi versions prior to 0.11, which stems from a buffer error that can be exploited by an attacker to cause arbitrary code execution...
IBM InfoSphere Information Server 跨站脚本漏洞
IBM InfoSphere Information Server is a data integration platform from IBM in the United States. IBM InfoSphere Information Server version 11.7 contains a cross-site scripting vulnerability. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and...
CVE-2021-41041
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...
Bender ebee 充电控制器 安全漏洞
The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an unprotected data export. The backup export is protected by a random key. The key is set at user login. It is empty after a reboot. An attacker can exploit this...