21795 matches found
PT-2022-13670 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 14.7.7 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.9 prior to 14.9.2 Description: The issue concerns missing filtering in an error message, which exposes sensitive information when an...
CVE-2021-27493
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...
CVE-2021-27493
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...
Design/Logic Flaw
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...
CVE-2021-27493 Philips Vue PACS
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...
GitLab Community Edition和GitLab Enterprise Edition 信息泄露漏洞
GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab by GitLab, Inc. An information disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a lack of filtering in error messages. When the include...
Google Android Information Disclosure Vulnerability (CNVD-2022-44597)
Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from the disclosure of log information in ArrayMap, where the contents of SMS messages can be compromised. An attacker could explo...
GitLab Community Edition 和 Enterprise Edition 日志信息泄露漏洞
GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A log message disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a lack of cleanup of logged exception messages. A remo...
CVE-2021-43506
creationtimestamp| type| source ---|---|--- 2022-03-31 20:18:44+00:00| seen| https://t.me/cibsecurity/39926...
Phishers make a date with your calendar apps
Calendars are a rich source of bad behaviour for scammers and spammers. They’re one of the most prolific tools the workplace has for collaborative actions and general cross-purpose messaging. They’ve been misused by bad actors for many years now, most commonly spamming unwary potential victims an...
The vulnerability of the nbd network device implementation, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of NBD network block devices is related to integer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages such as NBDOPTINFO, NBDOPTGO, and NBDOPTEXPORTNAME...
CVE-2021-39739
In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
CVE-2021-39739
In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
Information disclosure
In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
Buffer Overflows
nbd is vulnerable to stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted message with an large value as the length of the name...
Buffer Overflows
nbd-server is vulnerable to heap-based buffer overflow. The vulnerability exist because a value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer which allows an attacker to send crafted messages which...
DrayTek Vigor Format String Vulnerability
DrayTek Vigor is a router. a format string vulnerability exists in DrayTek Vigor, which can be exploited by remote attackers to execute arbitrary code via specially crafted HTTP messages containing malformed query strings...
A Detailed Look at the Conti Ransomware Gang
Based on two years of leaked messages, 60,000 in all: The Conti ransomware gang runs like any number of businesses around the world. It has multiple departments, from HR and administrators to coders and researchers. It has policies on how its hackers should process their code, and shares best...
