CVE-2021-21281: Buffer Copy without Checking Size of Input

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. After establishing a TCP socket using the tcp-socket library, it is possible for the remote end to send a packet with a data...

CVE-2021-32944

A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service...

Siemens Solid Edge 安全漏洞

Siemens Solid Edge is a 3D CAD software. The software can be used in the industries of part design, assembly design, sheet metal design, welding design, and so on. A security vulnerability exists in Siemens Solid Edge PAR files. The vulnerability is due to a lack of proper validation of...

SiteManager-Embedded Web server Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in SiteManager-Embedded Web server, which stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

CVE-2020-17434

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Design/Logic Flaw

A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of NEF files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

CVE-2020-26986

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of JT files. This could lead to a heap-based buffer overflow. An attacker could leverage this...

CVE-2020-26991

Siemens JT2Go and Teamcenter Visualization are affected by CVE-2020-26991. All versions of JT2Go and Teamcenter Visualization prior to 13.1.0.2 do not validate user-supplied data when parsing ASM files, enabling pointer dereferences from untrusted sources and potential remote code execution in th...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundarie...

Bitdefender Hypervisor Introspection Input Validation Error Vulnerability

Bitdefender Hypervisor Introspection is a Hypervisor Introspection HVI security solution from Bitdefender Romania. It protects business-sensitive data before it is exposed by detecting and blocking cyberattacks in real-time. Bitdefender Hypervisor Introspection suffers from an input validation...

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android Pixel suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

CVE-2020-9247

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a...

Joplin Desktop Cross-Site Scripting Vulnerability

Joplin is an open source notes and to-do list application. A cross-site scripting vulnerability exists in Joplin Desktop version 1.2.6, which stems from the lack of proper validation of client-side data via a link in a note, and can be exploited by an attacker to inject JavaScript code into the...

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59772)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CMP files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

CloudBees Jenkins Release Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Audit Trail Plugin is used in one of the audi...

CVE-2020-8110

A vulnerability has been discovered in the cevaemu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized memory. This can lead to denial-of-service. This issue affects: Bitdefender Engines version 7.84897 a...

PYSEC-2020-320

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the datasplits argument of tf.rawops.StringNGrams lacks validation. This allows a user to pass values that can cause heap overflow errors and even leak contents of memory In the linked code snippet, all the binary strings after ...

Kentico Cross-Site Scripting Vulnerability (CNVD-2020-52038)

Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A cross-site scripting vulnerability exists in Kentico prior to version 12.0.75, which stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this...

Exment Cross-Site Scripting Vulnerability

Exment is a Japanese free data management Web system with a simple structure, pre-existing business templates, and links to multiple types of data to minimize the trouble of searching. It supports windows, mac and linux systems. A cross-site scripting vulnerability exists in Exment v3.6.0 and pri...