util-linux 输入验证错误漏洞

util-linux is an open source package. An input validation error vulnerability exists in util-linux version 2.37.1, which stems from an integer overflow in util-linux. An attacker can exploit this vulnerability to cause a buffer overflow by using system resources in a manner that results in a larg...

Multiple Trend Micro Products Input Validation Error Vulnerability

Trend Micro OfficeScan XG is a distributed anti-virus software, and Trend Micro Apex One is an endpoint security protection software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is an enterprise-class information security protection solution...

FreeRDP 输入验证错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP Freerdp team. FreeRDP suffers from an input validation error vulnerability that stems from clipboard redirection being enabled by default. An attacker could read arbitrary files from a connected client...

OpenStack 输入验证错误漏洞

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace in the United States. Openstack Nova suffers from an input validation error vulnerability that allows remote attackers to exploit the vulnerability ...

Eclipse Mosquitto 输入验证错误漏洞

Eclipse Mosquitto is a set of open source messaging agent software from the Eclipse Foundation.An input validation error vulnerability exists in Eclipse Mosquitto 2.07 and earlier versions, which allows an attacker to crash the server by sending a PUBLISH packet with subject length = 0...

tinyexr 输入验证错误漏洞

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

JustArchiNET ArchiSteamFarm 输入验证错误漏洞

ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. An input validation error vulnerability exists in JustArchiNET ArchiSteamFarm. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor...

Exiv2 输入验证错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An integer overflow vulnerability exists in CrwMap::encode0x1810 in Exiv2 version 0.27.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

Huawei OxfordS-AN00A 输入验证错误漏洞

Huawei OxfordS-AN00A is a smartphone from Huawei China.The Huawei OxfordS-AN00A is vulnerable to an input validation error, which stems from a missing parameter checksum. An attacker could trick users into installing a malicious app, which could modify specific parameters and cause the system to...

mod_auth_openidc 输入验证错误漏洞

modauthopenidc is a software application. It is an authentication/authorization module for the Apache 2.x HTTP server that is used as an OpenID Connect dependency to authenticate users against the OpenID Connect provider. Previous versions of modauthopenidc were vulnerable to an input validation...

Facebook HHVM 输入验证错误漏洞

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of PHP loading dynamic pages. Facebook HHVM is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to perform out-of-bounds writes on the heap,...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to trigger an integer overflow and execute arbitrary code on the target system via a specially crafte...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient validation of user-provided input in the CoreAudio subsystem. A remote attacker could exploit the vulnerability to deliver...

Apple macOS Big Sur输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from insufficient validation of user-supplied input by the Model I/O subsystem. A remote attacker could exploit the vulnerability to trick a...

Redis 输入验证错误漏洞

Redis is an open source ANSI C, network-enabled, memory-based, and persistent logging, Key-Value storage database with a multilingual API. The vulnerability can be exploited to attack 32-bit Redis programs running on 32-bit systems by combining the BIT command with the proto-max-bulk-len...

Apple macOS 输入验证错误漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. An input validation error vulnerability exists in macOS due to insufficient validation of user-provided input in IOKit. A native application can execute arbitrary code using root...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient input validation provided by WebKit to the user. A remote attacker could use this vulnerability to trick a victim into visitin...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from Audio providing insufficient input validation to the user. The vulnerability allows a local user to execute arbitrary code with elevate...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient input validation provided to users in Crash Reporter. The vulnerability allows local users to elevate privileges...

Oracle Hospitality Reporting and Analytics输入验证错误漏洞

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insight into business operations, and improves efficiency by delivering information to all roles within the organization. and Analytics version 9.1.0...