The vulnerability of the VMware Identity Manager (vIDM), Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager lies in the transmission of data through an unprotected primary channel, allowing attackers to circumvent existing security restrictions.

The vulnerability of the VMware Identity Manager vIDM, Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager lies in the transmission of data through an unprotected primary channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security...

The vulnerabilities of the VMware Identity Manager (vIDM), vRealize Automation, Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager software are related to insufficient validation of incoming requests. This allows attackers to execute SSRF attacks.

The vulnerabilities of VMware Identity Manager vIDM, vRealize Automation, Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager are related to insufficient validation of incoming requests. Exploiting these vulnerabilities allows a malicious actor to execute an SSRF attack b...

Mozilla Rust Denial of Service Vulnerability (CNVD-2021-61402)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust suffers from a denial-of-service vulnerability that can be exploited by attackers to cause data contention by sending specially crafted requests...

Mozilla Rust Denial of Service Vulnerability (CNVD-2021-61390)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a denial of service...

Mozilla Rust Cross-Site Scripting Vulnerability (CNVD-2021-61406)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A cross-site scripting vulnerability exists in comrak crate in versions of Mozilla Rust prior to 0.10.1, which could be exploited by an attacker to execute the script in a Web browser in the secure context of a...

Mozilla Rust Code Execution Vulnerability (CNVD-2021-61410)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A code execution vulnerability exists in nalgebra crate prior to Mozilla Rust 0.27.1, which stems from the failure of nalgebra crate to ensure that the number of elements equals the product of the number of rows...

Linux kernel security bypass vulnerability (CNVD-2021-60520)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that can be exploited by attackers to defeat the ASLR protection mechanism...

Linux kernel information disclosure vulnerability (CNVD-2021-68182)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that can be exploited by an attacker to read uninitialized memory...

Linux kernel denial of service vulnerability (CNVD-2021-60516)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a denial of service vulnerability that is caused by an out-of-bounds read flaw in strlen in fs/nfsd/trace.h. A remote attacker can exploit this vulnerability to cause a denial o...

Mozilla Rust Denial of Service Vulnerability (CNVD-2021-61401)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A denial-of-service vulnerability exists in Mozilla Rust's sklose disrustor, which stems from the fact that RingBuffer does not properly limit the number of variable references, and can be exploited by attackers...

Microsoft Windows Media Foundation权限许可和访问控制问题漏洞

Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...

Linux kernel information disclosure vulnerability (CNVD-2021-60524)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that could be exploited by an attacker to obtain any information changed in the network namespace and use this information to launch further attacks on the...

Mozilla Rust Denial of Service Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A denial of service exists in Mozilla Rus, which can be exploited by attackers to cause a denial of service...

Mozilla Rust has an unspecified vulnerability (CNVD-2021-61405)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. a security vulnerability exists in the anymap crate of Mozilla Rust version 0.12.1, which can be exploited by attackers to compromise soundness by converting u8 to u64...

Mozilla Rust Cross-Site Scripting Vulnerability (CNVD-2021-61389)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A cross-site scripting vulnerability exists in ammonia prior to Mozilla Rust 3.1.0, which can be exploited by attackers to inject malicious scripts into web pages...

Linux kernel denial-of-service vulnerability (CNVD-2021-60517)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to an out-of-bounds access to xdrsetpagebase in net/sunrpc/xdr.c. By executing many NFS 4.2 READPLUS operations, a remote attacker could exploit this vulnerability to atta...

Linux kernel denial-of-service vulnerability (CNVD-2021-60518)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a deadlock flaw in btrfs when there is not enough free space in system spaceinfo. A local attacker can exploit this vulnerability to cause a denial of service situation...

Linux kernel denial-of-service vulnerability (CNVD-2021-60513)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a failure to properly set the connection order flaw in fs/nfs/nfs4client.c. A remote attacker could exploit this flaw to cause a mount hang and result in a denial of...

Linux kernel denial-of-service vulnerability (CNVD-2021-60514)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a failure to properly access permissions flaw in the shadow page in arch/x86/kvm/mmu/pagingtmpl.h. By sending a build request, a local attacker could exploit this flaw t...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. playXE/cgc for Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause data contention...