VideoLAN VLC media player security vulnerability

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. It supports the playback of a wide range of media files, CD-ROMs, etc., audio and video formats WMV, MP3, etc., and more. A security vulnerability exists in...

CVE-2023-32825

In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07884130; Issue ID: ALPS07884130...

CVE-2023-32825

In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07884130; Issue ID: ALPS07884130...

CVE-2023-32825

The CVE-2023-32825 entry documents an out-of-bounds read in the bluethooth service due to improper input validation, enabling local information disclosure without user interaction. The vulnerability affects the bluethooth component described in the MediaTek context and is associated with patch AL...

CVE-2023-46802

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references XXE due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

Rocky Linux 8 : kernel (RLSA-2023:0101)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0101 advisory. - A flaw was found in the Linux kernel's driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple...

Rocky Linux 8 : python-pillow (RLSA-2020:3185)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:3185 advisory. - In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than...

Rocky Linux 8 : kernel-rt (RLSA-2023:0114)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0114 advisory. - A flaw was found in the Linux kernel's driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple...

Huawei HarmonyOS Competitive Conditions Issue Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a Competitive Conditional Issue vulnerability, which stems from a conditional competitive vulnerability in the kernel module. A...

F5 Networks BIG-IP : SSB Variant 4 vulnerability (K29146534)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K29146534 advisory. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the...

Google Android Information Disclosure Vulnerability (CNVD-2024-02712)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is caused due to out-of-bounds reads in system components. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2024-02704)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is caused due to out-of-bounds reads in system components. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2024-01369)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is caused by out-of-bounds reads in system components. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2024-01375)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is caused by out-of-bounds reads in system components. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is caused by out-of-bounds reads in system components. An attacker can exploit this vulnerability to obtain sensitive information...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created USDC file...

The vulnerability of the RegisterRegister function in TP-LINK’s TL-WR886N router software allows a hacker to execute arbitrary code.

The vulnerability of the RegisterRegister function in TP-LINK’s TL-WR886N router software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Palantir Gotham Orbital-Simulator Path Traversal Vulnerability

Palantir Gotham Orbital-Simulator is a software tool from Palantir, Inc. designed to provide advanced data analysis and visualization for working with a variety of different types of data, including large-scale geospatial data. A security vulnerability exists in Palantir Gotham Orbital-Simulator...

The vulnerability of the mod_macro module in the Apache HTTP Server allows a hacker to trigger a service failure.

The vulnerability of the modmacro module in the Apache HTTP Server is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

carRental Security Vulnerability

carRental is a car rental software from carRental, Inc. A security vulnerability exists in version 1.0 of carRental that stems from the system's susceptibility to incorrect access control arbitrary file reads on the back-end system...