CVE-2021-22465

A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

CVE-2021-22465

The CVE-2021-22465 entry relates to a heap-based buffer overflow in a HarmonyOS component. Impact described as local attackers potentially causing kernel system unavailability. Connected sources (including Red Hat and CNVD variants) consistently identify the same issue without additional technica...

PT-2021-4762 · Microsoft · Windows Update Assistant

Name of the Vulnerable Software and Affected Versions: Windows Update Assistant versions affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Assistant, which can be exploited to elevate privileges. Recommendations: At the moment,...

Pivotal Software RabbitMQ 代码问题漏洞

Pivotal Software RabbitMQ is a suite of open source message broker software from Pivotal Software, USA that implements the Advanced Message Queuing Protocol AMQP. A code issue vulnerability exists in RabbitMQ that stems from the software only enabling the HTTP interface and not being able to...

Unable to create MCS machine catalog due to large number of Provisioning Tasks

In rare cases, MCS machine catalog may fail to create with the following error -- Action Name: MCCreateMachineCatalogInitialzation Exception: DesktopStudioErrorId : UnknownError ErrorCategory : ResourceUnavailable DesktopStudioPowerShellHistory : Create Machine Catalog 'XXXXXXX' On analyzing the...

Stanford CoreNlp 代码问题漏洞

Stanford CoreNlp is a set of open source, natural language analysis tools written in Java by the Stanford Nlp Group team in the U.S. A security vulnerability exists in Stanford Nlp Group, which stems from improper XML external entity reference restrictions. No details of the vulnerability are...

Draytek VigorConnect 跨站请求伪造漏洞

VigorConnect is the native network management software for DrayTek devices.A cross-site request forgery vulnerability exists in Draytek VigorConnect version 1.6.0-B3. No details of the vulnerability are currently available...

PT-2021-4435 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Excel. This vulnerability can be exploited by attackers to obtain sensitive information and potentially...

Vulnerabilities found in Corel products

FortiGuard Labs has found vulnerabilities in the following Corel products: Corel CorelDraw Standard Corel PDF Fusion Corel PhotoPaint Corel Presentations Corel WordPerfect A malicious party can exploit these vulnerabilities to execute arbitrary code under application privileges or to gain access ...

Grav 访问控制错误漏洞

Grav is a scalable CMS content management system for personal blogs, small content publishing platforms and single-page product displays. grav contains an access control error vulnerability that stems from the product's lack of validation of cookies and integrity checks. No detailed vulnerability...

Vulnerability found in Redis

A vulnerability has been found in Redis. The vulnerability allows a malicious party to perform a denial-of-service. Few details have been made public yet. No patches or mitigating measures have been announced yet. More information can be found at: https://github.com/redis/redis/issues/6633...

PT-2021-10550 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue, as it refers to a duplicate candidate that has been removed to prevent accidental usage. It mentions...

PT-2021-6941 · Microsoft · Office Web Apps +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps affected...

PT-2021-7645 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC version 2.9 Description: The issue is related to the netipmid interface IPMI lan+ in the OpenBMC embedded operating system, which is associated with errors during the authentication procedure. An attacker can exploit this issue by...

QEMU 资源管理错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a resource management error vulnerability, for which no further information is available at this time, please stay tuned to...

IBM Security SOAR 安全漏洞

IBM Security SOAR, formerly Resilient, is an IBM product designed to help your security team confidently address cyber threats, automate through intelligence, and collaborate through consistency. minimum privilege level to perform operations, which can create new vulnerabilities or amplify the...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii is vulnerable to cross-site request forgery, and no detailed vulnerability details are currently available...

Puppet 日志信息泄露漏洞

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, etc. There is a security vulnerability in Puppet Enterprise. No information about th...

PT-2021-9654 · Unknown · Rukovoditel Project Management App

Name of the Vulnerable Software and Affected Versions: Rukovoditel Project Management App version 2.7.2 Description: An exploitable SQL injection issue exists in the 'entities/fields' page. The heading field id parameter in this page is vulnerable to authenticated SQL injection. An attacker can...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...