Fatek FvDesigner Post-Release Reuse Vulnerability

Fatek FvDesigner is a software tool for designing and developing projects for the FATEK FV HMI series. A post-release reuse vulnerability exists in the way that Fatek FvDesigner 1.5.76 and earlier versions handle project files. An attacker can exploit this vulnerability to execute arbitrary code...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Payments in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this time...

On Vulnerability-Adjacent Vulnerabilities

At the virtual Enigma Conference, Googles Project Zeros Maggie Stone gave a talk about zero-day exploits in the wild. In it, she talked about how often vendors fix vulnerabilities only to have the attackers tweak their exploits to work again. From a MIT Technology Review article: Soon after they...

tomcat: HTTP/2 request header mix-up

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this...

tomcat: HTTP/2 request header mix-up

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this...

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

Design/Logic Flaw

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

CVE-2020-13548

CVE-2020-13548 – Foxit Reader is affected when a specially crafted PDF (11) triggers reuse of previously freed memory, enabling arbitrary code execution. Affected product/version (per sources): Foxit Reader 10.1.0.37527 (and related Foxit Reader/PhantomPDF components). Attack vector: user must op...

CVE-2021-21502

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISIPRIVAUTHSSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before...

PT-2021-16810 · Cosmos Network · Ethermint

Name of the Vulnerable Software and Affected Versions: Cosmos Network Ethermint versions = v0.4.0 Description: The issue is related to a cross-chain transaction replay vulnerability in the EVM module. This vulnerability is caused by the use of the same chainID and signature schemes with Ethereum...

Fortinet FortiIsolator Code Issue Vulnerability

Fortinet FortiIsolator is a Fortinet USA application that provides remote security isolation capabilities for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects business-critical data from sophisticated threats on the Web...

Google Chrome post-release reuse vulnerability (CNVD-2021-14738)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Navigation in versions prior to Google Chrome 88.0.4324.146. An attacker can exploit this vulnerability to potentially perform sandbox escaping via a crafted HTML page...

Google Chromium 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Payments in versions prior to Google Chrome 88.0.4324.146. An attacker can exploit this vulnerability to perform sandbox escaping via a crafted HTML page...

Linux kernel post-release reuse vulnerability (CNVD-2021-14804)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A kernel stack reuse after release vulnerability exists in PI futex in Linux kernel 5.10.11 and earlier versions duri...

Linux kernel 资源管理错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A kernel stack reuse after release vulnerability exists in PI futex in Linux kernel 5.10.11 and earlier versions duri...

Google Chrome post-release reuse vulnerability (CNVD-2021-30147)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 88.0.4324.96. An attacker can cause heap damage via a crafted HTML page...

Google Chrome post-release reuse vulnerability (CNVD-2021-30148)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in Omnibox in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to perform sandbox escaping via a crafted HTML page...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Media in versions prior to Google Chrome 88.0.4324.96. A remote attacker can cause heap damage via a carefully crafted...

Nvidia vGPU manager 竞争条件问题漏洞

Nvidia vGPU manager is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. NVIDIA vGPU manager suffer...