5525 matches found
Google Android 代码问题漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 11 prior to Framework 9, 10, 11, and 12. There is no information about this vulnerability yet, so please stay tuned to CNNVD or the vendor's announcement...
Crafter CMS 跨站脚本漏洞
Crafter CMS is an open source content management system CMS for digital experience applications.A cross-site scripting vulnerability exists in Crafter CMS, which stems from a lack of data validation filtering of user-supplied data and output. An attacker with a Site role could exploit the...
Kimai 访问控制错误漏洞
kimai2 is an open source, web-based multi-user time tracking application. kimai2 is vulnerable to an access control error, and no details of the vulnerability are currently available...
IBM MQ Appliance安全漏洞
The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A security vulnerability exists in the IBM MQ Appliance that stems from the appliance being affected by a denial-of-service attack caused by a concurrency issue. No detail...
Apache Apisix 命令注入漏洞
Apache Apisix is a cloud-native microservices API gateway service from the Apache Foundation. The software is based on OpenResty and etcd and features dynamic routing and plugin hot-loading for API management in a microservice architecture. Apache APISIX has a security vulnerability that stems fr...
Vulnerabilities found in Veritas Enterprise Vault
Vulnerabilities have been found in Veritas Enterprise Vault. A malicious party could potentially exploit the vulnerabilities to run execute arbitrary code on an Enterprise Vault server. To do this, the malicious party must send malicious network traffic to the vulnerable server. To successfully...
Directory traversal
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the...
Microsoft Azure Sphere 安全漏洞
Microsoft Azure Sphere is a security vulnerability in Microsoft Azure Sphere, an appliance used by Microsoft to provide security in cloud environments. No details of the vulnerability are currently available...
Microsoft Azure Real Time Operating System 权限许可和访问控制问题漏洞
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. A vulnerability exists in Microsoft Azure RTOS with privilege permission and access control issues. The vulnerability stems from a lack of effective privilege permission and access control...
PT-2021-5016 · Microsoft · Windows Remote Desktop Protocol Client +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol Client affected versions not specified Description: The vulnerability is related to a lack of protection for service data in the Windows operating system's Remote Desktop Protocol Client. It may allow a remote...
DDoS Attacks Shatter Records in Q3, Report Finds
The third quarter saw the sheer volume of distributed denial-of-service DDoS attacks surge to several thousand hits per day, signaling a re-distribution of tactics by malicious actors away from cryptomining and toward the use of DDoS as a tool of intimidation, disinformation and straight-up...
OESA-2021-1419 rubygem-bundler security update
Bundler manages an application's dependencies through its entire life, across many machines, systematically and repeatably. Security Fixes: Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home...
Google TensorFlow 输入验证错误漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from an input validation error vulnerability that stems from the fact that TensorFlow allows tensors to have a large number of dimensions, each of which can be adjusted...
Google TensorFlow 数字错误漏洞
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A numeric error vulnerability exists in versions of Google TensorFlow prior to 2.7.0, which stems from the fact that AllToAll in TensorFlow performs division by zero when inferring code. No details of t...
Jenkins 访问控制错误漏洞
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . Jenkins has an Access Control Error vulnerability that stems from FilePathmkdirs create parent directory operation is n...
json-ptr 安全漏洞
Json-Ptr is a full implementation of Json pointer Rfc 6901 for Nodejs and modern browsers. a security vulnerability exists in Json-Ptr, which stems from a design or implementation impropriety in the code development process of a web system or product. No details of the vulnerability are currently...
Google Android 资源管理错误漏洞
Google Android is a Linux-based open-source operating system from the U.S. company Google. Android Pixel has security vulnerabilities, and no details of the vulnerabilities are available...
Google Android 安全漏洞
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 12. No detailed vulnerability details are available...
Google Android 输入验证错误漏洞
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 11. No detailed vulnerability details are available...
