9694 matches found
Mozilla: Use-after-free in WebGPU IPC Framework
An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...
Microsoft Word 2016 Tampering Vulnerability (KB5002139)
This host is missing a critical security update according to Microsoft KB5002139. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
CVE-2022-24512
A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...
CVE-2022-26486
An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...
Google Android 输入验证错误漏洞
Google Android is a Linux-based open source operating system from Google. An input validation error vulnerability exists in Google Android, which can be exploited by an attacker to compromise a vulnerable system...
VulnCheck KEV: CVE-2004-0210
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system...
Mozilla Thunderbird 缓冲区错误漏洞
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The software supports the IMAP and POP email protocols as well as the HTML email format. Mozilla Thunderbird suffers from a buffer error vulnerability that...
Hashicorp Nomad 资源管理错误漏洞
Hashicorp Nomad is a distributed, data center-aware cluster and application scheduler from Hashicorp, USA. The program supports the deployment of microservices, batch, containerized and non-containerized applications. HashiCorp Nomad suffers from a Resource Management Error vulnerability that...
GHSA-47WR-426J-FR82 Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer
Impact Users unpacking a tarball through dbdeployer may use a maliciously packaged tarball that contains symlinks to files external to the target. In such scenario, an attacker could induce dbdeployer to write into a system file, thus altering the computer defences. Mitigating factors For the...
CVE-2022-22536
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the...
OS Command Injection in microweber/microweber
Description OS command injection also known as shell injection is a web security vulnerability that allows an attacker to execute arbitrary operating system OS commands on the server that is running an application, and typically fully compromise the application and all its data. Very often, an...
PT-2022-12009 · Acronis · Acronis Cyber Protect Home Office +4
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 Windows versions before build 28035 Acronis Agent Windows versions before build 27147 Acronis Cyber Protect Home Office Windows versions before build 39612 Acronis True Image 2021 Windows versions before build 39287...
Design/Logic Flaw
SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system...
Mageia: Security Advisory (MGASA-2020-0429)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KING JIM Label printer 访问控制错误漏洞
KING JIM Label printer is a label printer from KING JIM Japan. An access control error vulnerability exists in the KING JIM Label printer, which stems from the product not adding adequate protection for credentials. An attacker could use this vulnerability to obtain credentials, connect to a Wi-F...
NVIDIA SHIELD TV 权限许可和访问控制问题漏洞
Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. The NVIDIA SHIELD TV suffers from a privilege license and access control issue vulnerability that stems from a failure to restrict AHB-DMA access in the BROM, distributed with the Android image of the NVIDIA-supplied T21...
ROS-2-2047
2.2047 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...
The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code remotely and completely compromise the vulnerable system by using specially crafted requests...
Unspecified Vulnerability in AMD Graphics Driver (CNVD-2021-100382)
AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to compromise a system by an unprivileged user...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to improper code generation management, allows attackers to execute arbitrary code and cause the system to be completely compromised.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code, leading to a complete compromise of the system...