13267 matches found
CVE-2021-37018: Undefined Security Weakness
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash...
IBM Tivoli Key Lifecycle Manager 安全漏洞
IBM Tivoli Key Lifecycle Manager TKLM is a set of key lifecycle management software from IBM Corporation. The software provides key storage, key maintenance, and key lifecycle management for storage devices.A security vulnerability exists in IBM Tivoli Key Lifecycle Manager, which stems from the...
Mozilla Firefox XSS Vulnerability (CVE-2011-3656) - Linux
Mozilla Firefox is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
PT-2021-8060
Name of the Vulnerable Software and Affected Versions MicroLogix 1400 affected versions not specified Description The issue is related to errors in resource management in the firmware of MicroLogix 1400 programmable logic controllers. Exploitation of this issue could allow a remote attacker to ga...
The vulnerability in the DHCP service of the microprogramming software for controllers APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a perpetrator to trigger read errors, write errors, and service failures.
The vulnerability in the DHCP service of the microprogramming software for APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause read errors, write errors,...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability in the implementation of the check_map_func_compatibility() function in Linux operating systems allows a malicious actor to exploit their privileges.
The vulnerability of the checkmapfunccompatibility function in Linux operating systems is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Security Account Manager in the Microsoft Windows operating system allows a perpetrator to bypass the authentication process.
The vulnerability of the Security Account Manager in the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass authentication processes remotely...
dnsmasq security and bug fix update
2.79-19 - Correct typo in man page 1947039 2.79-18 - Properly randomize outgoing ports also with bound interface CVE-2021-3448 2.79-17 - Fix sporadic bind-dynamic failures 1887649 2.79-16 - Fix network errors on queries both from ipv4 and ipv6 1921153...
The vulnerability of the web interface of the operating system PAN-OS allows a perpetrator to enhance their privileges and execute arbitrary code.
The vulnerability of the PAN-OS operating system’s web interface is related to synchronization errors when using common resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...
The vulnerability of the mbochs_ioctl function in the samples / vfio-mdev / mbochs.c file of Linux operating system kernels allows a hacker to gain access to protected information.
The vulnerability of the mbochsioctl function in the samples / vfio-mdev / mbochs.c file of Linux operating system kernels is related to errors in virtual function input/output operations VFIO. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of the HtmlResponseMessage component in the microprogramming software of D-Link DIR-866L routers allows attackers to execute cross-site scripting attacks.
The vulnerability of the HtmlResponseMessage component in the microprogramming software of D-Link DIR-866L wireless routers is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute cross-site scripting attacks...
PT-2021-6405 · Oracle +8 · Mysql Server +7
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.27 and prior Description: The issue is related to the Server: Group Replication Plugin component of MySQL Server and is caused by errors in resource release. It allows a high-privileged attacker with network access v...
The vulnerability of the print spooler driver in Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is associated with information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure (OMI) for virtual machine management in Azure allows a attacker to execute arbitrary code, resulting in management code generation errors.
The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure OMI for managing virtual machines in Azure is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.
The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...
The vulnerability of the Protection Against Distributed Denial of Service attacks function in Cisco IOS XE allows a attacker to cause a service failure.
The vulnerability of the Protection Against Distributed Denial of Service attacks in Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Open Design Alliance Drawings SDK 缓冲区错误漏洞
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for the . An "out...
