BusyBox resource management error vulnerability

BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. Busybox suffers from a Resource Management Error vulnerability that arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked...

Keybase path traversal vulnerability

Keybase is a PGP technology-based social networking platform that supports end-to-end encryption.Keybase Client for Windows prior to version 5.7.0 is vulnerable to a path traversal vulnerability that stems from a networked system or product failing to properly filter special elements in a resourc...

BusyBox Resource Management Error Vulnerability (CNVD-2021-88212)

BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. Busybox suffers from a Resource Management Error vulnerability that arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked...

Zydis has an unspecified vulnerability

Zydis is an open source x86/x86-64 disassembly library from the Zyantific team.A security vulnerability exists in Zydis, which stems from an improper design or implementation during the development of code for a networked system or product. No detailed vulnerability details are currently availabl...

Thymeleaf-Spring5 code injection vulnerability

Thymeleaf-Spring5 is an open source, modern, server-side Java template engine for web and standalone environments from the Thymeleaf team. A security vulnerability exists in Thymeleaf-Spring5, which arises from a networked system or product that does not properly filter specific elements of...

Miniftpd Buffer Overflow Vulnerability (CNVD-2021-103090)

Miniftpd is a simplified version of the open source vsftp server for Linux that implements some of the features of vsftp. Miniftpd suffers from a buffer overflow vulnerability, which stems from a networked system or product that does not properly validate data boundaries when performing operation...

VISAM VBASE code-related vulnerabilities

Visam VISAM VBASE is a data acquisition and monitoring system from Visam, Germany. VISAM VBASE has a code issue vulnerability that arises from improper design or implementation during code development of a networked system or product...

HCL Software HCL Domino security vulnerabilities

HCL Software HCL Domino is an application software from India HCL Software. It provides a platform for application development. HCL Software HCL Domino has a security vulnerability that arises from a lack of security measures such as authentication, access control, and privilege management in a...

Nextcloud has an unspecified vulnerability (CNVD-2022-18417)

Nextcloud is an open source, self-hosted file synchronization and sharing communications application platform from Nextcloud, a German company. nextcloud has a security vulnerability that stems from an improper design or implementation during the development of code for a networked system or...

Mycodo path traversal vulnerability

Mycodo is an environment monitoring and conditioning system. Used to couple inputs and outputs to sense and manipulate the environment, Mycodo is vulnerable to a path traversal vulnerability in versions prior to 8.12.7, which stems from a networked system or product failing to properly filter...

NVIDIA Windows GPU Display Driver code-related vulnerabilities

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver for the Windows platform from Nvidia, Inc. The NVIDIA Windows GPU Display Driver is vulnerable to a code issue that arises from improper management of system resources e.g., memory, disk space, files, etc. b...

NVIDIA Windows GPU Display Driver code-related vulnerabilities

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver for the Windows platform from Nvidia, Inc. The NVIDIA Windows GPU Display Driver is vulnerable to a code issue that arises from improper management of system resources e.g., memory, disk space, files, etc. b...

udisks input validation vulnerability

Udisks is a daemon for querying and managing storage devices. An input validation error vulnerability exists in Udisks, which arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product...

Zephyr Buffer Overflow Vulnerability (CNVD-2021-83788)

Zephyr is an open source, small, scalable, real-time operating system from the Linux Foundation in the U.S. A security vulnerability exists in Zephyr, which stems from improper design or implementation during the development of code for a networked system or product. No details of the vulnerabili...

Zephyr buffer error vulnerability

Zephyr is an open source, small, scalable, real-time operating system from the Linux Foundation in the U.S. A security vulnerability exists in Zephyr, which stems from improper design or implementation during the development of code for a networked system or product. No details of the vulnerabili...

GPAC MP4Box security vulnerability

GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but it can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and so on. A security vulnerability exists in GPAC MP4Box that originates when a networked syste...

Samsung SMR security vulnerabilities

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from an improperly designed or implemented code development process for a networked system or product...

Bosch Rexroth IndraMotion MLC Access Control Vulnerability

The Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robot control. A security vulnerability exists in Bosch Rexroth IndraMotion Mlc, which arises from a networked system or product that does not properly use the relevant cryptographic algorithms, a...

GitLab information leakage vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in all GitLa...

SuiteCRM authorization issue vulnerability

SuiteCRM is a customer relationship management system from the SuiteCRM Suitecrm team. SuiteCRM has a security vulnerability that stems from a lack of security measures such as authentication, access control, and rights management in a networked system or product...