828 matches found
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
Sudo 缓冲区错误漏洞
Sudo is a program used on Unix-like systems that allows users to execute commands in a secure manner with special privileges. A buffer error vulnerability exists in Sudo versions 1.8.0 through 1.9.12, which stems from the presence of an array out-of-bounds error that could result in a heap-based...
Lanner IAC-AST2500A 缓冲区错误漏洞
The Lanner IAC-AST2500A is a module and accelerator card from Lanner. It is suitable for Lanner network devices to support remote management and monitoring of system operation based on the IPMI standard. A buffer error vulnerability exists in the Lanner IAC-AST2500A version 1.00.0, which stems fr...
Acer Altos W2000h-W570h F4 缓冲区错误漏洞
Acer Altos W2000h-W570h F4 is a server from Acer China. It offers best-in-class performance, innovative technology, high configurability and comprehensive management features. A security vulnerability exists in Acer Altos W2000h-W570h F4 version R01.03.0018, which originates from a discovery...
Adobe Dimension Resource Management Error Vulnerability (CNVD-2024-43040)
Adobe Dimension is the American Adobe is a set of 2D and 3D composite design tools. Adobe Dimension suffers from a resource management error vulnerability that arises from the program not properly handling malicious files. An attacker could exploit the vulnerability to execute arbitrary code...
Robustel R1510 缓冲区错误漏洞
Robustel R1510 is an industrial VPN router from Robustel China. A buffer error vulnerability exists in Robustel R1510 version 3.1.16 and 3.3.0. The vulnerability stems from a denial-of-service vulnerability in the webserver hashFirst function, where a specially crafted network request could resul...
Robustel R1510 缓冲区错误漏洞
Robustel R1510 is an industrial VPN router from Robustel China. A buffer error vulnerability exists in Robustel R1510 version 3.1.16 and 3.3.0. The vulnerability stems from a denial-of-service vulnerability in the webserver hashFirst function, where a specially crafted network request could resul...
Bentley Systems MicroStation和Bentley View 缓冲区错误漏洞
Bentley Systems MicroStation and Bentley View are both products of Bentley Systems, Inc.MicroStation is a Cad software platform for 2D and 3D design and drafting.Bentley View is a free viewer.... A buffer error vulnerability exists in MicroStation versions prior to 10.17.01.58 and Bentley View...
Azure RTOS USBX 数字错误漏洞
Azure RTOS USBX is a USB host, device, and mobile OTG embedded stack for Azure RTOS open source. Fully integrated with Azure RTOS ThreadX, it is available for all processors that support Azure RTOS ThreadX. A numeric error vulnerability exists in Azure RTOS USBX versions prior to 6.1.12, which...
Huawei HarmonyOS Fingerprint Module Logic Error Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS version 2.0 contains a logic error vulnerability that stems from a business logic error in the fingerprint module. An attacker could exploit the...
IBM Robotic Process Automation Access Control Error Vulnerability (CNVD-2022-68277)
IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An Access Control Error vulnerability exists in IBM Robotic Process Automation...
Cisco ATA 190 缓冲区错误漏洞
The Cisco ATA 190 is an analog telephone adapter from Cisco. The Cisco ATA 190 Series has a buffer error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code,...
Omron CX-Programmer 缓冲区错误漏洞
Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A buffer error vulnerability exists in Omron CX-Programmer version 9.78 and earlier, which stems from vulnerability to out-of-bounds writes, which could allow an attacker to execute arbitrary code...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a buffer error vulnerability that stems from the presence of out-of-bounds writes...
Apple iCloud for Windows 缓冲区错误漏洞
Apple iCloud for Windows is an American Apple Apple cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc. A security vulnerability exists in Apple iCloud for Windows version 7.21, which stems from the fact that the processing of malicious...
Apple macOS Monterey 安全漏洞
Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey suffers from a logic error vulnerability that stems from a logic error issue in the application, which can be exploited by an attacker to gain unauthorized Bluetooth...
American Megatrends Incorporated Aptio 缓冲区错误漏洞
American Megatrends Incorporated Aptio is a BIOS configuration program. A security vulnerability exists in American Megatrends Incorporated Aptio version 5.x. An attacker could exploit the vulnerability to execute arbitrary code at the PEI stage...
Google Chrome Resource Management Error Vulnerability (CNVD-2022-81243)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Resource Management Error vulnerability that originates from a confusion in the instructions of the program responsible for freeing memory in Frames. An attacker could exploit this vulnerability to cause...
Nintendo Game Boy Color 缓冲区错误漏洞
The Nintendo Game Boy Color is a handheld game console from Nintendo of Japan Nintendo. Nintendo Game Boy Color suffers from a buffer error vulnerability that originates from a memory corruption...
tesseract 数字错误漏洞
tesseract is an open source OCR Optical Character Recognition engine. A numeric error vulnerability exists in the Leptonica linked library v1.79.0 in tesseract v5.0.0, which can be exploited by an attacker to cause an arithmetic anomaly via a specially crafted JPEG file, leading to a denial of...