Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media Framework component of Google Android 10 and 11. An attacker can exploit the vulnerability to obtain...

Adobe Lightroom Classic 代码问题漏洞

Adobe Lightroom is an image organization and image processing software. An uncontrolled search path element vulnerability exists in Adobe Lightroom Classic 10.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

Microsoft Windows Digital Media Receiver Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Digital Media Receiver. The following products and editions are affected:Windows 10 Version 20H2 for ARM64-based Systems,Windows 10...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2020-72488)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media Framework component of Google Android 10 and 11. An attacker can exploit the vulnerability to obtain...

Microsoft Windows Error Reporting Security Vulnerability

Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific problems. A security vulnerability exists in Microsoft Windows Error Reportin...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Backup Engine that originates from an application that does not properly impose security restrictions in Windows Backup Engine, which coul...

SAP Disclosure Management 代码问题漏洞

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1 that stems fro...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. An attacker can exploit this vulnerability to gain...

Microsoft Windows Backup Engine Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Backup Engine. The following products and versions are affected:Windows Server, version 1909 Server Core...

Microsoft Windows Lock Screen Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Lock Screen. The following products and versions are affected:Windows Server 2016 Server Core installation,Window...

Setup Dynamic Update for Windows 10, version 2004 and 20H2: December 8, 2020

None None...

PT-2020-16433 · Intland · Codebeamer Alm

Name of the Vulnerable Software and Affected Versions: Intland codeBeamer ALM versions 10.x through 10.1.SP4 Description: An issue was discovered in the way Intland codeBeamer ALM parses ReqIF XML data used for importing projects. The software components are insecurely configured, allowing for XM...

Intland Software codeBeamer ALM Code Issue Vulnerability

Intland Software codeBeamer ALM is an application lifecycle management platform from Intland Software, Germany. The platform supports application lifecycle management, requirements management, risk management and software development. A security vulnerability exists in Intland codeBeamer ALM...

SUSE-SU-2020:2947-1 Security update for gcc10, nvptx-tools

This update for gcc10, nvptx-tools fixes the following issues: This update provides the GCC10 compiler suite and runtime libraries. The base SUSE Linux Enterprise libraries libgccs1, libstdc++6 are replaced by the gcc10 variants. The new compiler variants are available with '-10' suffix, you can...

PT-2020-16169 · Red Hat · Infinispan

Name of the Vulnerable Software and Affected Versions: infinispan version 10 Description: A flaw was found in the infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authorization is enabled, any user with authentication...

HCL Notes 安全漏洞

HCL Notes is an enterprise email client. A buffer overflow vulnerability exists in DXL in HCL Notes 9, 10, and 11. The vulnerability stems from improper validation of user input. An attacker could exploit the vulnerability to cause Notes to crash or execute attacker-controlled code on the server...

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software allows a hacker to disclose protected information or gain increased privileges.

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information or enhance their...

UBUNTU-CVE-2020-27218

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that ...

House Rental 1.0 - 'keywords' SQL Injection

Exploit Title: House Rental 1.0 - 'keywords' SQL Injection Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: 2020-08-07 Vendor Homepage: https://projectworlds.in Software Link: https://projectworlds.in/wp-content/uploads/2019/06/home-rental.zip Version: 1.0 Tested On: Windows 10 Pro...

Become a White Hat Hacker — Get 10 Top-Rated Courses at 97% OFF

Many of us here would love to turn hacking into a full-time career. To make that dream come true, you need to master your subject and earn some key certifications. To speed up this process, you might want to take a little guidance from the experts. Featuring 98 hours of content from top...