7511 matches found
Security Bulletin: IBM FileNet Records Manager/IBM InfoSphere Enterprise Records/IBM Enterprise Records Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...
Security Bulletin: IBM WebSphere Process Server Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...
The vulnerability of the `ff_frame_pool_get` function in the `framepool.c` component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the ffframepoolget function in the framepool.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service interruptions...
Unbreakable Enterprise kernel security update
5.4.17-2136.311.6 - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' Sherry Yang Orabug: 34535896 5.4.17-2136.311.5 - netfilter: nftables: do not allow RULEID to refer to another chain Thadeu Lima de Souza Cascardo Orabug: 34495567 CVE-2022-2586 - netfilter: nftable...
CVE-2022-3260
The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these results incorrectly, allowing clickjacking attacks...
SWFTools 代码问题漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files by Matthias Kramm, a private developer. A code issue vulnerability exists in SWFTools that stems from a discovery via the MovieAddFrame function in /src/gif2swf.c that contains a segmentation conflict...
CVE-2022-39212
Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or...
Nextcloud Talk 信息泄露漏洞
Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. An information disclosure vulnerability exists in Nextcloud Talk versions prior to 13.0.8 and 14.0.4, which stems from the presence of an information disclosure issue that allows an attacker t...
CVE-2022-39212 Last video frame is still sent after video is disabled in a call in Nextcloud Talk
Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or...
Last video frame is still sent after video is disabled in a call
None...
CVE-2022-29240
Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is greater than the real one, part of...
PT-2022-19490 · Scylla +2 · Scylla Enterprise +3
Name of the Vulnerable Software and Affected Versions: Scylla Enterprise versions prior to 2020.1.14 Scylla Enterprise versions prior to 2021.1.12 Scylla Enterprise version 2022.1.0 Scylla Open Source versions prior to 4.6.7 Scylla Open Source versions prior to 5.0.3 Description: Scylla is a...
Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and IBM Business Process Manager (BPM)
Summary Security vulnerabilities have been reported for IBM SDK for Node.js. IBM Business Automation Workflow and IBM BPM include a stand-alone tool for editing configuration properties files that is based on IBM SDK for Node.js. Vulnerability Details CVEID: CVE-2019-9517 DESCRIPTION: Multiple...
The vulnerability of the amqp_handle_input function in the amqp_connection.c component of the RabbitMQ messaging broker allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the amqphandleinput function in the amqpconnection.c component of the RabbitMQ messaging broker is related to the lack of checks on the frame size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Resource Management Error vulnerability that originates from a confusion in the instructions of the program responsible for freeing memory in Frames. An attacker could exploit this vulnerability to cause...
PT-2022-37681 · Undefined · Undefined
Уязвимость драйверов rtl8192u ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать утечку памяти с помощью сетевого кадр 802.11 типа...
PT-2022-37682 · Undefined · Undefined
Уязвимость драйверов rtl8192e ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать утечку памяти с помощью сетевого кадра 802.11 типа...
jetty: Resource exhaustion when receiving an invalid large TLS frame
When using SSL/TLS with Jetty, either with HTTP/1.1, HTTP/2, or WebSocket, the server may receive an invalid large greater than 17408 TLS frame that is incorrectly handled, causing high CPU resources utilization. The highest threat from this vulnerability is to service availability...
