IBM Cúram Social Program Management Authorization Issue Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A security vulnerability exists in IBM Cúram Social Program Management that arises from a networked system or product th...

Linux kernel Zero Length Bvec Code Issue Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel Zero Length Bvec, which arises from improper design or implementation during code development for a networked system or...

Google Android WhatsApp Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA.System is one of the system components.Email is one of the email components.WhatsApp is a set of mobile applications that utilize the web to deliver text messages from Google and the Open Handheld...

Lua Code Problems Vulnerabilities

Lua is a lightweight, extensible open source scripting language from the Lua team. A code issue vulnerability exists in the ldebug.c file in Lua version 5.4.0. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detaile...

Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46244)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

IBM Security Key Lifecycle Manager Information Disclosure Vulnerability (CNVD-2020-43154)

IBM Security Key Lifecycle Manager Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. An information disclosure vulnerability exists in IBM...

MilkyTracker Resource Management Error Vulnerability

MilkyTracker is an application that plays MOD format files and arranges them. A resource management error vulnerability exists in the PlayerGeneric.cpp file in MilkyTracker 1.02.00 and earlier versions. The vulnerability originates from a networked system or product that mismanages system resourc...

FreeBSD Resource Management Error Vulnerability (CNVD-2020-35935)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A resource management error vulnerability exists in FreeBSD. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed vulnerabili...

FFmpeg Resource Management Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A resource management error vulnerability exists in FFmpeg version 4.2.3. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked...

Qualcomm MSM8909W and QCS605 Resource Management Error Vulnerability

The Qualcomm QCS605 and Qualcomm MSM8909W are both central processing unit CPU products from Qualcomm Incorporated. A resource management error vulnerability exists in Display in the Qualcomm MSM8909W and QCS605. The vulnerability arises from improper management of system resources e.g., memory,...

KDE Amarok Resource Management Error Vulnerability

KDE Amarok is a cross-platform open source audio player from the KDE community. A resource management error vulnerability exists in KDE Amarok version 2.8.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No...

Kata Containers Backlink Vulnerability

Kata Containers is an open source lightweight virtual machine builder from the Kata Containers community. A backlink vulnerability in Kata Containers versions prior to 1.11.0, which stems from a networked system or product that does not properly filter filenames of links or shortcuts that represe...

COVIDSafe app information disclosure vulnerability (CNVD-2020-30664)

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...

Canonical Subiquity Log Message Disclosure Vulnerability

Canonical Subiquity is an Ubuntu server installer from Canonical UK. A log information disclosure vulnerability exists in Canonical Subiquity used in Ubuntu Server. The vulnerability stems from the abnormal output of log files from a networked system or product. No details of the vulnerability ar...

libEMF Resource Management Error Vulnerability

libEMF is a library for generating enhanced metafiles. A resource management error vulnerability exists in libEMF 1.0.11 and earlier versions. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed...

KDE kio-extras Information Disclosure Vulnerability

KDE kio-extras is an add-on from the KDE community that provides KIO KDE Input/Output functionality. An information disclosure vulnerability exists in the fishProtocol::establishConnection in the fish/fish.cpp file in KDE kio-extras versions 20.04.0 and earlier. The vulnerability stems from a...

FreeRDP Resource Management Error Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP Resource Management Error Vulnerability. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. An attacker ca...

AASync Buffer Overflow Vulnerability

AASync is a file backup, folder synchronization utility. A buffer overflow vulnerability exists in AASync version 2.2.1.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Apple CUPS Buffer Overflow Vulnerability

Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS. The...

Buildah Path Traversal Vulnerability

Buildah is a tool that supports building OCI container images. A path traversal vulnerability exists in Buildah. The vulnerability stems from a failure of a networked system or product to properly filter for special elements in a resource or file path. An attacker could use this vulnerability to...