Expat 输入验证错误漏洞

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in buildmodel in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code ...

Dolibarr 输入验证错误漏洞

Dolibarr is a software application. A modern software package that helps manage your organization's activities. Dolibarr suffers from an input validation error vulnerability that stems from Dolibarr being prone to business logic errors...

Google Golang 输入验证错误漏洞

Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...

Digital Bazaar Forge 输入验证错误漏洞

Digital Bazaar Forge is a native implementation of Tls in Javascript and an open source tool for writing encryption-based and web-intensive web applications from Digital Bazaar, Inc. An input validation error vulnerability exists in Digital Bazaar Forge, which stems from the product allowing URL...

Discourse Input Validation Error Vulnerability (CNVD-2022-05507)

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.Discourse is vulnerable to an input validation error that could be exploited to trigger a denial of service attack via the /message-bus/diagnostics path...

Apache Kylin 输入验证错误漏洞

Apache Kylin is an open source distributed analytic data warehouse from the Apache Foundation. The product mainly provides SQL query interface on top of Hadoop/Spark and multi-dimensional analysis OLAP and other functions. Apache kylin has an input validation error vulnerability, which stems from...

Apache Parquet Input Validation Error Vulnerability

Apache Parquet is a columnar storage format from the Apache Foundation in the United States. It can be used in any project in the Hadoop ecosystem. An input validation error vulnerability exists in Apache Parquet, which stems from the product's Parquet-MR not validating Parquet files. An attacker...

GLPI 操作系统命令注入漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Mediatek MediaTek 芯片 输入验证错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. The MediaTek chips suffer from an input validation error vulnerability that originates in libMtkOmxGsmDec, where information disclosure is possible due to incorrect boundary checking...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Autofill, which can be exploited by attackers to bypass security restrictions...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. An input validation error vulnerability exists in the MediaTek wifi driver, which originates in the wifi driver and may cause a system crash due to a lack of validation checks. This could lead to a remot...

Mediatek MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. MediaTek Chips An input validation error vulnerability exists, which stems from a possible information disclosure due to a lack of boundary checking in libvcodecdrv. This could lead to a local information disclosure without...

Qualcomm 组件 输入验证错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides functionality to Qualcomm devices. A security vulnerability exists in the Qualcomm Component that originates from incorrect validation of memory regions in the Hypervisor can lead to incorrect regi...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. The MediaTek chips are vulnerable to an input validation error vulnerability that stems from a possible memory corruption due to an integer overflow in the mdp driver. This could result in a local...

Wireshark input validation error vulnerability

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

WordPress plugin Stars Rating 输入验证错误漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Stars Rating Plugin has a denial of service vulnerability in versions prior to 3.5.1, which stems from a failure ...

Sun & Moon Rise Shockwall system 输入验证错误漏洞

The Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company, that suffers from a security vulnerability that could be exploited to send malicious responses to servers to partially disrupt service...

Wireshark 输入验证错误漏洞

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

Delta Electronics DIAEnergie SQL Injection (CVE-2021-38391)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error when processing the type parameter in the AMHandler.ashx endpoint...

Delta Electronics DIAEnergie SQL Injection (CVE-2021-32983)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing keyword parameter in HandlerCFG.ashx endpoint...