The vulnerability of the Flask software’s extension relates to insecure privilege management. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

Confluent Ansible 安全漏洞

Confluent Ansible is a product from the US-based Confluent, Inc. It provides an easy way to deploy, manage and configure Confluent Platform services. A security vulnerability exists in Confluent Ansible cp-ansible versions 5.5.0, 5.5.1, 5.5.2, and 6.0.0, in which its auxiliary components are...

The vulnerability of the autoindex module of the NGINX server, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NGINX server’s autoindex module is related to incorrect processing of years with four or more digits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts of the SLURM resource management tool, related to privilege management errors, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts in the SLURM resource management tool is related to improper handling of the environment. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficiently checking incoming requests. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its...

PT-2021-6545 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 1.0.1 Description: The issue is related to a memory leak in the def parent box new function of the MP4Box component in the GPAC multimedia platform. This leak occurs due to incorrect memory deallocation before the last reference...

PT-2021-6519 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the infe box read function of the MP4Box component in the GPAC multimedia platform. This allows attackers to read memory via a crafted file, potentially giving them acce...

CVE-2021-39150

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...

PT-2021-22409

Name of the Vulnerable Software and Affected Versions XStream versions prior to 1.4.18 Description XStream is a simple library to serialize objects to XML and back again. In affected versions, this issue may allow a remote attacker to request data from internal resources that are not publicly...

PT-2021-6570 · Matio +2 · Matio +2

Name of the Vulnerable Software and Affected Versions: matio versions 1.5.18 through 1.5.21 Description: The issue is related to a heap-based buffer overflow in the ReadInt32DataDouble function of the MATIO library, which can be exploited by a remote attacker to access confidential data, compromi...

The vulnerability of the software for interacting with servers via CURL lies in the use of memory areas after they are freed, allowing an attacker to gain access to confidential data.

The vulnerability of the software for interacting with servers via CURL is related to the use of memory areas after they are freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick involves allowing the operation to be within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

The vulnerability of the `saveBinaryCLProgram` function in the `magick/opencl.c` component of the ImageMagick console graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the saveBinaryCLProgram function in the magick/opencl.c component of the ImageMagick console graphics editor allows for the manipulation of zero-point pointers. Exploiting this vulnerability enables a remote attacker to gain access to confidential data, compromise its...

CVE-2021-28993

Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information remote...

CVE-2021-34812

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

Palo Alto Networks Prisma Cloud 日志信息泄露漏洞

Palo Alto Networks Prisma Cloud is a comprehensive cloud-native security platform from US-based Palo Alto Networks, Inc. provides cloud security services. Palo Alto Networks Prisma Cloud Compute suffers from a log information disclosure vulnerability that originates when a secret used to authoriz...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. Apple macOS suffers from a buffer error vulnerability that stems from a boundary condition in the model IO subsystem. A remote attacker could exploit the vulnerability to access potentially sensitiv...

The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to modify data or cause partial service disruption.

The vulnerability of the Core server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data through HTTP requests...

Vulnerabilities fixed in Xerox WorkCentre

Vulnerabilities have been fixed in Xerox WorkCentre. The vulnerabilities allow a remote malicious person to access to sensitive data and cause a denial-of-service cause. Xerox has released updates to fix the vulnerabilities. More information can be found on the page below:...

MOXA NPort IA5150A Series 安全漏洞

Moxa NPort IA5150A Series is a set of industrial control device servers.The Moxa NPort IA5150A Series is vulnerable to a credential plaintext storage vulnerability, which can be exploited by remote attackers to submit ad hoc requests that can obtain sensitive information...