Vector 35 Binary Ninja 资源管理错误漏洞

Vector 35 Binary Ninja is a repository. This repository contains documentation and source code for the Binary Ninja reverse engineering platform API. A resource management error vulnerability exists in Vector 35 Binary Ninja that stems from Binary Ninja not verifying the existence of an object...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to the inclusion of functions from an unreliable controlled area, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2021-32665

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation -...

CVE-2021-32665

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation -...

CVE-2021-32665

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation -...

CVE-2021-32665

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation -...

Wire-ios 数据伪造问题漏洞

Wire is a chat software by an individual developer. The program supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original way of saying hello, PING. A data forgery vulnerability exists in Wire wire-ios 3.8.0 and earlier versions...

CVE-2021-32665: Insufficient Verification of Data Authenticity

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation -...

Race condition

There is a denial of service vulnerability in the versions 10.1.0.126C00E125R5P3 of HUAWEI Mate 30 and 10.1.0.152C00E136R7P2 of HUAWEI Mate 30 5G . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service conditio...

CVE-2021-22364

There is a denial of service vulnerability in the versions 10.1.0.126C00E125R5P3 of HUAWEI Mate 30 and 10.1.0.152C00E136R7P2 of HUAWEI Mate 30 5G . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service conditio...

Proofpoint Insider Threat Management Server Remote Code Execution Vulnerability (CNVD-2021-36665)

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. A remote code execution vulnerability exists in the WriteImage API of Proofpoint Insider Threat Management Server versions prior to 7.9.1. The...

Foxit Reader 资源管理错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A reuse-after-release remote code execution vulnerability exists in Foxit Reader Annotation. The vulnerability stems from not verifying the existence of an object before performing an operation on it. An attacker can exploit...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the fact that certain functions are enabled from an unverified controlled area, allowing an intruder to gain unauthorized access to protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve the inclusion of functions from an unverified controlled area. Exploiting these vulnerabilities can allow a remote attacker to gain unauthorized access to protected information using a specially crafted...

CVE-2021-28181

The specific function in ASUS BMC’s firmware Web management page Remote video configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

PT-2021-18384 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions 0.10.0 through 0.13.3 Description: The issue is related to an Open Redirect in the user sign-in/out process. Some API endpoints under /.pomerium/ do not verify parameters with pomerium signature, which could allow modifying...

CVE-2021-24123

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...

CVE-2021-24123

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...

Wordpress CleanTalk SQL注入漏洞

Wordpress CleanTalk is an application plugin for Wordpress. Provides a free anti-spam plugin that works with the premium Cloud AntiSpam service cleantalk.org. Anti-Spam by CleanTalk WordPress plugin before 5.149 suffers from a SQL injection vulnerability that stems from entering unverified...

Genua high-resistance-firewall-genugate 访问控制错误漏洞

Genua high-resistance-firewall-genugate is an application from the German company Genua. Provides a network protection feature An Access Control Error vulnerability exists in Genua high-resistance-firewall-genugate, which originates during login, when the authentication method does not check the...