Apache HTTP Server 输入验证错误漏洞

Apache HTTP Server is an open source web server from the Apache Foundation. The server is fast, reliable, and extensible via a simple API. Apache HTTP Server 2.4.53 and earlier versions are vulnerable to an input validation error. An attacker could exploit this vulnerability to read unexpected...

Out-of-Bounds Write

liblouis.so is vulnerable to out of bounds write. The vulnerability exists due to a lack of sanitization in compileRule function of compileTranslationTable.c which allows an attacker to write to invalid memory...

HUAWEI HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a memory out-of-bounds read/write issue in the video framework. An attacker exploited...

The vulnerability of the Vim text editor’s append command allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vim text editor’s append command relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created file...

The vulnerability of the tty subsystem in the Linux operating system allows a hacker to gain access to confidential information or cause service failures.

The vulnerability of the tty subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

Google Chrome ANGLE Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the ANGLE component of Google Chrome versions prior to 102.0.5005.61, which stems from a confusion in the instructions responsible for freeing memory in the ANGLE component program. An...

Google Chrome UI Foundations Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from a confusion in the UI Foundations component regarding the instruction the program is responsible for freeing memory. An...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Adobe InCopy text creation and editing software lies in the writing beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

USN-5425-1 pcre3 vulnerabilities

Yunho Kim discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause applications using PCRE to expose sensitive information. This issue only affects Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 21.10 and Ubuntu 22.0...

Vulnerability of the drm_lease_held function (drivers/gpu/drm/drm_lease.c) in the Linux operating system’s kernel, allowing a hacker to trigger a service failure or disclose protected information

The vulnerability of the drmleaseheld function drivers/gpu/drm/drmlease.c in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure or disclose protected information using a...

The vulnerability of the Lenovo PCManager application, related to writing beyond the buffer in memory, allows a malicious actor to cause a service failure.

The vulnerability of the Lenovo PCManager application for controlling and configuring computers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-28830 Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Framemaker versions 2029u8 and earlier and 2020u4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

Vulnerability of the screen-sharing function in Google Chrome and Microsoft Edge browsers, allowing a hacker to execute arbitrary code

The vulnerability of the screen-sharing function in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Siemens Industrial Devices using libcurl

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Industrial devices using libcurl Vulnerabilities: Use After Free 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-132-13 Siemens Industrial Devices using...

The vulnerability of the “Bookmarks” control in Microsoft Edge and Google Chrome browsers allows a hacker to disclose protected information.

The vulnerability of the “Bookmarks” control element in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the Scripting Engine component in Windows operating systems relates to writing beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Scripting Engine component in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...