Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in the clipboard in versions prior to Google Chrome 87.0.4280.66. No detailed vulnerability details are provided at this...

Moodle SQL注入漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from the fact that some database module web services allow students to add...

Micro Focus ArcSight Logger 跨站脚本漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in Micro Focus...

Access Control Error Vulnerability in Multiple Adobe Products

Adobe Acrobat and so on are the United States of America Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. reader is a set of PDF document reading software. Adobe Acrobat Reader is a PDF viewer. Adobe Reader Mobile?There is an access control error...

Maxmind Libmaxminddb Buffer Overflow Vulnerability

Maxmind Libmaxminddb is the U.S. Maxmind company a C code library for processing Maxmind type files. The code library for processing Maxmind DB files, including the format of the geo-ip data, geo-ip can be used to retrieve the target IP information. A security vulnerability exists in libmaxminddb...

Nextcloud Server Encryption Issue Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server 18.0.4, which stems from too small a random character set being used for encryption, making decryption tim...

PT-2023-21654 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: Database auto-linking filter affected versions not specified Description: The issue arises from the database auto-linking filter's output requiring additional sanitizing to prevent a cross-site scripting XSS risk. This implies that without...

Apple macOS Mojave Input Validation Error Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in several Apple products, which stems from the elevated privileges that can be gained by applications. No details of the vulnerability are available at this time...

HPE BlueData EPIC Software Platform and HPE Ezmeral Container Platform Security Vulnerabilities

HPE BlueData EPIC and HPE Ezmeral Container Platform are both products of hpe, USA. hpe BlueData EPIC is software that enables the creation of Hadoop and Spark clusters in virtualized environments. the software combines virtualization with big data to improve team agility. hpe Ezmeral Container...

Linux kernel resource management error vulnerability (CNVD-2020-60721)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel 5.9.1 and earlier versions, which arises from mismanagement of system resources e.g., memory, disk...

Apple macOS Catalina buffer overflow vulnerability (CNVD-2020-60824)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.6, which originates from viewing a maliciously created JPEG file could lead to arbitrary code execution. No details of...

Microsoft Windows Office Code Injection Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Windows Office suffers from a code injection vulnerability that allows an attacker to execute arbitrary cod...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-59751)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. Microsoft Word Remote Code Execution Vulnerability. The vulnerability stems from the software's inability to properly handle objects in memory. No detailed vulnerability details are provided ...

SAP NetWeaver Application Server Java Input Validation Error Vulnerability

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java. No detailed vulnerability...

PT-2020-4583 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.0 and 2.3.5p1 and earlier Description: The issue is related to an unsafe file upload vulnerability, which could result in arbitrary code execution. This could be exploited by authenticated users with administrative...

IBM Cúram Social Program Management Encryption Issue Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A security vulnerability exists in IBM Cúram Social Program Management that stems from hashing a token with the MD5...

DEBIAN-CVE-2020-10767

A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation IBRS is available. This flaw allows a loc...

PT-2020-15384

Name of the Vulnerable Software and Affected Versions Gazie version 7.29 Description The issue allows for Cross Site Scripting XSS via the "http://192.168.100.7/gazie/modules/config/admin utente.php" endpoint, specifically through the user name variable. An attacker can inject JavaScript code,...

Linux kernel elevation of privilege vulnerability (CNVD-2020-52618)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the Linux kernel. The vulnerability stems from a lack of authentication measures or insufficient authentication...

GHSA-224H-P7P5-RH85 Directory Traversal in wenluhong1

Affected versions of wenluhong1 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...