Rengine 操作系统命令注入漏洞

Rengine is an automated reconnaissance framework for gathering information during penetration testing of web applications. A security vulnerability exists in Rengine version v1.3.0, which stems from a command injection in its scan engine functionality...

Cisco Identity Services Engine 安全漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information about the network, users, and devices to develop and implement policies to monitor the network. A security vulnerability exists in the Cisco Identity...

CVE-2022-29694

Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemuramfree...

CVE-2022-27169

An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

GHSA-VFJW-CRCQ-Q92V ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

GHSA-WWFW-M54G-GV72 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

GHSA-H8JQ-5737-HPCF ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

podman: Default inheritable capabilities for linux container should be empty

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker Engine, where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to...

Google Chrome 安全漏洞

Google Chrome is a web browser by Google, Inc. A security vulnerability previously existed in Google Chrome version 108.0.5359.71, which stemmed from an improperly implemented vulnerability in the Blink engine...

CVE-2022-0896

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to bypass existing security restrictions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Unicorn Engine 安全漏洞

Unicorn Engine is a software application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. A security vulnerability exists in splitregion in uc.c in versions prior to Unicorn Engine 2.0.0-rc5, which can be exploited by an attacker to escape the sandbox and...

CVE-2021-3762

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution. Mitigation Mitigatio...

The vulnerability of the Akkadian Provisioning Manager Engine lies in its lack of measures to neutralize special elements used in the operating system command line. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Akkadian Provisioning Manager Engine exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

VulnCheck KEV: CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

VulnCheck KEV: CVE-2016-0193

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and CVE-2016-0191...

CVE-2018-17862

The CVE describes a cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori. An attacker can inject arbitrary web script via the sys_jdbc parameter to the path /TestJDBC_Web/test2. Affected software is SAP J2EE Engine/7.01/Fiori; the issue is tied to improper handling/validation of...

Akkadian Provisioning Manager操作系统命令注入漏洞

Akkadian Provisioning Manager is a provisioning solution from Akkadian USA for new integrations for more robust provisioning automation. An operating system command injection vulnerability exists in the Akkadian Provisioning Manager Engine PME that allows an unauthorized attacker to have root-lev...

OESA-2021-1270 dovecot security update

Dovecot is an IMAP server for Linux/UNIX-like systemsa wrapper package that will just handle common things for all versioned dovecot packages. Security Fixes: The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular...

Unspecified Vulnerability in JerryScript (CNVD-2021-42986)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparseexpression in js-parser-expr.c:3565 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...