Zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr version 3.1 and earlier versions. An attacker exploited the vulnerability to trigger a denial-of-service exploit...

Google Chrome Vulkan buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that could be exploited by attackers to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS, which stems from a shortcut that may be able to check...

CVE-2022-39057 Changing Information Technology Inc. RAVA certificate validation system - Command Injection

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service...

Design/Logic Flaw

An external attacker is able to send a specially crafted email with many recipients and trigger a potential DoS of the system...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an unknown function in its city.php component that operates on the parameter searccity to cause SQL...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which originates from an unknown function in employeeview.php in the Image File Handler, and can be exploited by an...

Information disclosure

Windows Distributed File System DFS Information Disclosure Vulnerability...

Remote Code Execution

org.hsqldb:hsqldb is vulnerable to remote code execution. Improper validation of untrusted inputs in supportsJavaMethod function allows an authenticated attacker to upload and execute malicious code on the system under attack...

Bento4 AP4_Atom::TypeFromString Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer error vulnerability exists in Bento4 v1.6.0-639, which stems from a heap overflow in the AP4Atom::TypeFromString function of the mp4tag component, and can be exploited by an attacker to compromise the confidentiality...

CVE-2022-41033 Windows COM+ Event System Service Elevation of Privilege Vulnerability

...

DEBIAN-CVE-2022-39291

ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are subject to a vulnerability which allows users with "View" system permissions to inject new data into the logs stored by Zoneminder. This was observed through an HTTP POST request...

PT-2022-5137 · D-Bus +10 · D-Bus +10

Name of the Vulnerable Software and Affected Versions: D-Bus versions 1.12.24 and earlier, 1.13.x, 1.14.x before 1.14.4, and 1.15.x before 1.15.2 Description: An issue was discovered in D-Bus where an authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when...

PT-2022-25489 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350OMS version R14.2 Description: An issue exists in the software, where multiple Relative Path Traversal issues are present in different specific endpoints via the file parameter. This allows a remote authenticated attacker to read...

PT-2022-34109 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A potential security issue exists where the topmost page table may be leaked when a destroy operation fails. The actual impact and attack plausibility have not yet been proven...

Online Leave Management System SQL注入漏洞

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a SQL injection vulnerability in /maintenance/manageleavetype.php via the id parameter...

CVE-2022-38081

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...

Buffer overflow

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

Hardcoded cUSDT and cUSDC prices are dangerous to the system when those stablecoins depeg

Lines of code Vulnerability details Proof of Concept function getUnderlyingPriceCToken ctoken external override view returnsuint address underlying; //manual scope to pop symbol off of stack string memory symbol = ctoken.symbol; if compareStringssymbol, "cCANTO" underlying = addresswcanto; return...

Cognex 3D-A1000 Dimensioning System 安全漏洞

The Cognex 3D-A1000 Dimensioning System is a compact industrial smart camera from Cognex capable of capturing moving objects in 3D and 2D. A security vulnerability exists in Cognex 3D-A1000 Dimensioning System version 1.0.3 3354 and prior versions. An attacker could exploit the vulnerability to...