IBM Security Verify Access 信息泄露漏洞

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. An information disclosure vulnerability exists in IBM Security Access Manager...

PT-2021-3681 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A risk of SQL injection was identified in the library responsible for fetching a user's enrolled courses. This issue is related to a lack of protection measures for SQL queries. Exploitation...

Microsoft Windows Partition Management Driver 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Partition Management Driver in Microsoft...

Gentoo 安全漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. There is a security vulnerability in Gentoo. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

IBM Security Guardium 访问控制错误漏洞

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security Guardium...

ts-nodash 安全漏洞

ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...

Solidity 缓冲区错误漏洞

Solidity is a high-level programming language. A security vulnerability exists in Solidity version 0.7.5 due to a stack-use-after-return in "smtutil::CHCSmtLib2Interface::querySolver".No details of the vulnerability are available at this time...

HelpU 安全漏洞

HelpU agent is a software from HelpU Korea that uses remote control technology to resolve issues by allowing direct viewing of a customer's computer screen. It makes customer support easier and better. helpUS remote administration tool has a security vulnerability that stems from incorrect...

Nextcloud Talk 授权问题漏洞

Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. An authorization issue vulnerability exists in Nextcloud Talk that stems from unchanged cookie session data after changing authentication information in Talk. No details of the vulnerability a...

IBM WebSphere Application Server 安全漏洞

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in WebSphere Application Server tha...

CVE-2021-27632

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

CVE-2021-27633

SAP NetWeaver AS for ABAP RFC Gateway, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a...

CVE-2021-27629

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

FFmpeg 资源管理错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from a memory leak in the ffframepoolget function in framepool.c. The vulnerability is caused by a memory leak in the ffframepoolget function in the...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr has a security vulnerability that stems from improper handling of insufficient permissions or privileges in Zephyr. No details of the vulnerability are available at this time...

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in BatchToSpaceNd in Google TensorFlow. No details of the vulnerability are provided at this time...

Google TensorFlow 代码问题漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A null pointer dereference vulnerability exists in the Reshape operator in Google TensorFlow. No details of the vulnerability are provided at this time...

CVE-2021-32029

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality...

Microsoft Windows Container Manager Service 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the "Container Manager Service" of Microsoft...

Microsoft Visual Studio Code 命令注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A command injection vulnerability exists in Microsoft Visual Studio Code. No details of the vulnerability are provided at this time...