Oracle Virtualization 安全漏洞

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to compromise confidentiality...

CVE-2020-16045

Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

WordPress Elementor Contact Form DB plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Elementor Contact Form DB is a WordPress plugin. A cross-site request forgery vulnerability exists in the Wordpress Elementor Contact...

Amazon Linux AMI : golang (ALAS-2021-1471)

The version of golang installed on the remote host is prior to 1.15.5-1.65. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1471 advisory. Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. CVE-2020-28362 Go before 1.14.12 and 1.15.x before...

Multiple Sooil Product Trust Management Issue Vulnerabilities

Sooil Dana Diabecare RS and others are products of Sooil Korea.Sooil Dana Diabecare RS is a smart insulin pump with discrete remote control for medical use.Sooil Anydana-i is a mobile application that can be used to control the Sooil Dana Diabecare RS.Sooil Anydana-i is a mobile application that...

WordPress ultimate-category-excluder plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Ultimate-category-excluder Plugin...

PT-2021-7615 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 CGAL-5.1.1 Description: The issue is related to unverified array indexing in the SNC io parser::read vertex function of the Nef S2/SNC io parser.h component in the CGAL library. This allows a remote attacker to...

Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

CVE-2020-16015

Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

AZL-44673 CVE-2020-36048 affecting package js-jquery 3.5.0-4

Engine.IO before 4.0.0 allows attackers to cause a denial of service resource consumption via a POST request to the long polling transport...

Dell Inspiron 5675 BIOS 访问控制错误漏洞

The Dell Inspiron 5675 BIOS is a Dell USA program that provides basic inputs and outputs for the device, a self-test after powering on the device, and system self-boot functionality. A security vulnerability exists in the Dell Inspiron 5675 BIOS versions prior to version 1.4.1, which can be...

Hotfix XS82E010 - for Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX285937 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

WordPress Newsletter plugin unsafe deserialization vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. An insecure deserialization vulnerability exists in the Newsletter plugin in WordPress versions prior to 6.8.2. An authenticated remote attacker can exploit this vulnerability to inject arbitrar...

CVE-2020-26972

The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to. Such a check was omitted in WebGL, resulting in a use-after-free and a potentially exploitable crash. This...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A data validation insufficiency vulnerability exists in networking in versions prior to Google Chrome 87.0.4280.141. No detailed vulnerability details are provided at this time...

Google Chrome memory misreference vulnerability (CNVD-2021-04415)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Blink in versions prior to Google Chrome 87.0.4280.141. A remote attacker can exploit the vulnerability to potentially conduct an attack via a specially crafted HTML page utilizing heap...

Memory corruption

An attacker could send a specially crafted message to Crimson 3.1 Build versions prior to 3119.001 that could leak arbitrary memory locations...

OIC Exponent CMS Input Validation Error Vulnerability (CNVD-2021-02002)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...

Proofpoint Insider Threat Management Windows Agent 代码问题漏洞

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. A remote code execution vulnerability exists in the WriteWindowMouse API in Proofpoint Insider Threat Management Server versions prior to 7.9....

OIC Exponent CMS Input Validation Error Vulnerability (CNVD-2021-02003)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...