Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2022-67480)

Ice Hrm is a human resource management system, and a cross-site scripting vulnerability exists in Ice Hrm version 30.0.0.OS. The vulnerability stems from the inability of the IceHRM website to effectively filter html tags in user input, which could be exploited by a logged-in attacker to steal...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome Media is vulnerable to a memory misreference vulnerability that results from a mix-up in the program's instructions for freeing memory, which could be exploited to execute arbitrary code on the system or cause a denial of service...

Google Chrome和Chrome OS 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in Google Chrome OS Shell, which can be exploited by attackers to execute arbitrary code on the system or cause a denial of service condition...

Cisco Identity Services Engine 资源管理错误漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform oversees the network by collecting real-time information from the network, users, and devices to develop and enforce policies. A resource management error vulnerability exists...

F-Secure Linux Security 资源管理错误漏洞

F-Secure Linux Security is an integrated, out-of-the-box security solution from Finland's F-Secure. Featuring robust real-time protection against viruses and potentially harmful applications, it also includes Host Intrusion Prevention Hips functionality that protects against unauthorized system...

The vulnerability of the SAP Business One resource management system lies in the lack of restrictions on file loading, allowing a perpetrator to load and execute any desired file.

The vulnerability of the SAP Business One resource management system lies in the lack of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to load and execute any desired file remotely...

GitLab Enterprise Edition和GitLab Community Edition 资源管理错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A resource management error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which arises from user-supplied input in user...

Radare2 Resource Management Error Vulnerability (CNVD-2022-25194)

radare2 is a set of libraries and tools for working with binary files. A resource management error vulnerability exists in radare2, which can be exploited by an attacker to trigger a denial of service via a MIPS ELF64 binary by triggering an overload of Radare2...

Envoy Resource Management Error Vulnerability (CNVD-2022-15542)

Envoy is an open source distributed proxy server. Envoy is vulnerable to a resource management error that occurs when configuring "envoyv3apifieldextensions.filters.network.tcpproxy.v3. tunnelingconfig" crashes and the downstream connection is disconnected while the upstream connection or http/2...

Google Fscrypt 资源管理错误漏洞

Google Fscrypt is an open source advanced tool from Google Google. It is used to manage Linux native file system encryption. A resource management error vulnerability exists in Google fscrypt versions 0.3.0 through 0.3.2, which stems from user-supplied input that is not adequately validated. A...

Envoy Resource Management Error Vulnerability (CNVD-2022-82669)

Envoy is an open source distributed proxy server. Envoy is vulnerable to a resource management error, which stems from improper management of system resources by a networked system or product and can be exploited by an attacker to cause a denial of service...

usbredirparser 资源管理错误漏洞

usbredirparser is checking header length deserialized data. A resource management error vulnerability exists in usbredirparser that stems from a use-after vulnerability found in usbredirparser serialize in usbredirparser usbredirparser.c in versions of usbredirparser prior to 0.11.0. This issue...

HashiCorp Consul 资源管理错误漏洞

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A resource management error vulnerability exists in HashiCorp Consul and Consul...

libxml2 Resource Management Error Vulnerability (CNVD-2022-21487)

libxml2 is an open source library for parsing XML documents. It is written in C and can be called by multiple languages, such as C, C, XSH. libxml2 suffers from a resource management error vulnerability that can be exploited by attackers to threaten alerts that affect software or systems...

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions prior to 5.6.4, which can be exploited by attackers to perform denial-of-service attacks...

PJSIP 资源管理错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a Resource Management Error vulnerability that stems from the fact that in versions prior to 2.11.1, in a dialog...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a post-release use in the implementation of the RDMA communication manager listener code. By sending a carefully crafted request, an attacker could exploit this...

Envoy 资源管理错误漏洞

Envoy is an open source distributed proxy server. Envoy is vulnerable to a resource management error that occurs when configuring "envoyv3apifieldextensions.filters.network.tcpproxy.v3. tunnelingconfig" crashes and the downstream connection is disconnected while the upstream connection or http/2...

The vulnerability of the email verification component (DANE) based on DNS in Cisco AsyncOS operating system for the Cisco Email Security Appliance allows a attacker to trigger a service failure.

The vulnerability of the email verification component DANE in Cisco AsyncOS operating systems for the Cisco Email Security Appliance is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Envoy 资源管理错误漏洞

Envoy is an open source distributed proxy server. Envoy is vulnerable to a resource management error, which stems from improper management of system resources by a networked system or product and can be exploited by an attacker to cause a denial of service...