libtpms 缓冲区错误漏洞

libtpms is an application. Library that provides software emulation of trusted platform modules TPM 1.2 and TPM 2.0. libtpms has a security vulnerability that stems from a stack corruption bug that could lead to SIGBUS bad memory access and termination of swtpm. No detailed vulnerability details...

The vulnerability of the libxml2 library, related to insufficient validation of input data, allows attackers to trigger a denial-of-service condition.

The vulnerability of the libxml2 library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending specially crafted input data to the application...

UBUNTU-CVE-2021-30470

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

CVE-2021-25944

Prototype pollution vulnerability in 'deep-defaults' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-25409

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters...

GHSA-4J46-MP85-MV8C Path traversal in rollup-plugin-serve

Path traversal in npm package rollup-plugin-serve before version 1.0.2. There is no path sanitization in readFile operation...

GHSA-CG42-4WRC-GP47 Code Injection in node-extend

node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...

CM Registration Pro < 3.2.1 - PHP Object Injection

The plugin was using an outdated library which was affected by a PHP Object Injection issue. The free version is not affected as it was not using the library even though it was skipped with it...

UBUNTU-CVE-2021-32611

A NULL pointer dereference vulnerability exists in eXcallapi.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses...

CVE-2021-31204

.NET and Visual Studio Elevation of Privilege Vulnerability...

CVE-2021-31185

Windows Desktop Bridge Denial of Service Vulnerability...

CVE-2021-31170

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2021-31174

Microsoft Excel Information Disclosure Vulnerability...

CVE-2021-31180

Microsoft Office Graphics Remote Code Execution Vulnerability...

CVE-2021-28479

Windows CSC Service Information Disclosure Vulnerability...

CVE-2021-31177

Microsoft Office Remote Code Execution Vulnerability...

CVE-2021-31166

HTTP Protocol Stack Remote Code Execution Vulnerability...

GHSA-CF2X-RQC8-GRFQ Regular expression deinal of service in express-validators

All versions of package express-validators are vulnerable to Regular Expression Denial of Service ReDoS when validating specifically-crafted invalid urls...

GHSA-H68Q-55JF-X68W Prototype pollution in chart.js

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...

GHSA-662X-FHQG-9P8V Regular Expression Denial of Service in ua-parser-js

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...