PT-2022-12519 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists in the unlink chunk.isra file, causing a Denial of Service that is context-dependent. Recommendations: For GPAC version 1.0.1, consider restricting access to the unlink...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability, and no details of the vulnerability are available at this time...

PT-2022-12201

Name of the Vulnerable Software and Affected Versions Opmantek Open-AudIT version 4.2.0 Description An information exposure issue has been discovered, allowing an authenticated attacker to read files outside of the restricted directory. Recommendations For Opmantek Open-AudIT version 4.2.0,...

mruby 安全漏洞

mruby is a lightweight implementation of the Ruby language. mruby has a security vulnerability that stems from the fact that mruby is vulnerable to a heap-based buffer overflow attack. No details of the vulnerability are currently available...

Netgear RAX43 命令注入漏洞

Netgear RAX43 is a wireless router from Netgear, Inc. A command injection vulnerability exists in Netgear RAX43, which stems from the inclusion of a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter. No details of the...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A security vulnerability exists in versions of Rust crypto2 crate prior to 2021-10-08, which stems from a possible unaligned read of u32 during Chacha20 encryption and decryption. No details of the vulnerability...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. a security vulnerability exists in versions of Rust prior to ckb crate 0.40.0, which stems from a failed getblocktemplate RPC call. No details of the vulnerability are currently available...

Rust buffoon crate 安全漏洞

Rust buffoon crate is a simple buffer library for the Rust Google protocol. a security vulnerability exists in Rust buffoon crate, which stems from the fact that InputStream::read exact can read data from an uninitialized memory location. No details of the vulnerability are currently available...

Vim 资源管理错误漏洞

Vim is a UNIX-based editor. Vim is vulnerable to resource management errors, and no detailed vulnerability details are currently available...

Apple macOS High Sierra 安全漏洞

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers. Apple macOS High Sierra versions prior to 10.13.1 have a security vulnerability that stems from the fact that the screen lock may accidentally remain unlocked. No details of the vulnerability are current...

Apple macOS Mojave 安全漏洞

Apple macOS Mojave is a set of specialized operating systems developed for Mac computers by Apple USA. Apple macOS Mojave versions prior to 10.14 have a security vulnerability that stems from the possibility that agency recovery keys may be incorrectly reported as present. No detailed vulnerabili...

Catfish CMS 跨站脚本漏洞

Catfish CMS is an open source web content management system. a cross-site scripting vulnerability exists in Catfish CMS. No detailed vulnerability details are available at this time...

PT-2021-13384 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a side channel information disclosure in the getSerialForPackage method of DeviceIdentifiersPolicyService.java. This could allow an attacker to determine whether an app is...

PT-2021-5529 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 22.0, 15.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Media Encoder when processing 3GP files. This could lead to the disclosure of sensitive memory. An attacke...

Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio Code. No...

cpanminus 数据伪造问题漏洞

cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN without performing any other actions. cpanminus version 2.28 has a security vulnerability that stems from packages allowing signature verification to be bypassed. No details of the vulnerability are currently...

phpservermon 注入漏洞

phpservermon is a script that checks to see if your website and server are up and running. phpservermon suffers from an injection vulnerability, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2021-6328 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of proper validation of user-input strings before they are used to execute system calls. This could allow a remote attacker to execute...

IBM PowerVM Hypervisor 安全漏洞

IBM PowerVM Hypervisor is an application from Universal Business Machines IBM, Inc. provides a secure and scalable virtualization environment for applications that are built on the advanced RAS capabilities and leading performance of the Power Systems platform.A security vulnerability exists in I...

Squaredup 代码问题漏洞

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. SSRF vulnerabilities exist in SquaredUp for SCOM, and no detailed vulnerability details are available...