12413 matches found
CVE-2021-32963
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10...
Aveva SuiteLink Server 代码问题漏洞
Aveva SuiteLink Server is a communication server from AVEVA Aveva, UK. A code issue vulnerability exists in AVEVA SuiteLink Server that stems from a null pointer dereference in the SuiteLink Server when the SuiteLink Server handles command 0x04/0x0a...
CVE-2021-0642
In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for...
CVE-2020-28846
Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...
VulnCheck KEV: CVE-2017-8601
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory...
VulnCheck KEV: CVE-2017-8598
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory...
CVE-2021-3048
Certain invalid URL entries contained in an External Dynamic List EDL cause the Device Server daemon devsrvr to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall...
Vulnerabilities fixed in Tomcat
Debian has fixed vulnerabilities in Tomcat. The vulnerabilities allow a remote malicious person to circumvent a to bypass a security measure. -= Debian =- Debian has made updates to tomcat available for Debian 10.0 Buster to fix the vulnerability. You can install the custom packages by using...
Foxit Reader和Foxit PhantomPDF 后置链接漏洞
Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...
Microsoft Windows Storage Spaces Controller 输入验证错误漏洞
Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and editions are affected:Windows 10...
August 10, 2021-KB5004870 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
Microsoft Windows Event Tracing 后置链接漏洞
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A backlink vulnerability exists in Microsoft Windows Event Tracing. The following products and editio...
Microsoft Graphics Component 代码注入漏洞
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 201...
Microsoft Windows Update Assistant 缓冲区错误漏洞
Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Update. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...
Microsoft Windows 信息泄露漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...
Microsoft Windows 后置链接漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-base...
Microsoft Windows MSHTML Platform 代码注入漏洞
Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...
Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...
Microsoft Windows Update Assistant 安全漏洞
Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Update Assistant. The following products and versions are affected: Windows 10 Version 21H1 for ARM64-based Systems, Windows 10 Version 21H1 for 32-bit...