KODAK Lookout Converged Video System has Information Leakage Vulnerability

Ltd. is a leading provider of video and security products and solutions. An information leakage vulnerability exists in KODAK Lookout Converged Video System, which can be exploited by attackers to obtain sensitive information...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

Design/Logic Flaw

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privilege level 15. This...

vscode-swiftlint code execution vulnerability

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

USN-4801-1 root-system vulnerability

It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code...

Microsoft Windows DNS 安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and together, DNS clients and DNS servers provide name resolution services for computers and users that map computer nam...

CVE-2021-22883

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unabl...

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient input validation, allows attackers to re-record any files in the system.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to re-record any files in the system remotely...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to achieve...

NiuShop Single Merchant V4 Arbitrary File Deletion Vulnerability

NiuShop single merchant V4 system is a PHP open source mall system designed and developed by the mountain Hai Niu Zhi Yun Network Technology Co. NiuShop Single Merchant V4 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete system files...

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system organized by CASAP in the United States. The purpose of the project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient and easily retrievable. A cross-site...

CVE-2021-1335 Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...

Google Android heap buffer overflow vulnerability (CNVD-2021-14809)

Google Android is a Linux-based open source operating system developed by Google and the Open Handheld Consortium Google. Google Android 11 suffers from a buffer overflow vulnerability that originates from memory corruption in ksd due to a heap buffer overflow. An attacker can exploit the...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An arbitrary file read vulnerability exists in Apple macOS, which arises from an application not properly applying security restrictions within the APFS component of macOS. A local user can read arbitrary files on...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker could exploit this vulnerability to cause a...

Google Android System elevation of privilege vulnerability (CNVD-2021-13689)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit the vulnerability to potentiall...

BigProf Online Invoicing System 跨站脚本漏洞

BigProf Online Invoicing System OIS is an online invoicing system. A cross-site scripting vulnerability exists in Online Invoicing System OIS version 4.0, which can be exploited by an attacker to take over an administrative account by extracting a csrf token and sending a password change request,...

Google Chrome File System API Policy Enforcement Deficiency Vulnerability (CNVD-2021-28289)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A file system API policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass file system...

The vulnerability of the QES operating system, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the QES operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2020-17518

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...