Tencent OS-tiny 输入验证错误漏洞

Tencent OS-tiny is a real-time operating system developed by Tencent for the Internet of Things IoT. It is characterized by low power consumption, low resource consumption, modularity, security and reliability, which can effectively improve the development efficiency of IoT terminal products. An...

RIOT RIOT-OS 输入验证错误漏洞

RIOT RIOT-OS is a set of operating systems used in the Internet of Things IoT space. RIOT RIOT-OS suffers from an input validation error vulnerability that stems from incorrect memory allocation could lead to arbitrary memory allocation, which could result in unexpected behavior such as a crash o...

Nvidia vGPU Software 输入验证错误漏洞

NVIDIA vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. An input validation error vulnerability exists in NVIDIA vGPU Software, which stems from an unvalidated input length, and can be exploited by an attacker to tamper with data or denia...

F5 BIG-IP ASM 输入验证错误漏洞

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. An input validation error vulnerability exists in BIG-IP ASM that stems from insufficient...

eCosCentric eCosPro 输入验证错误漏洞

eCosCentric eCosPro is a software application from eCosCentric, Inc. It combines the feature set, stability and quality of support required for commercial embedded application development with eCos. eCosCentric eCosPro Versions suffers from an Input Validation Error vulnerability that stems from ...

uClibc-ng 输入验证错误漏洞

uclibc-ng is an application. Small C library for Linux. An input validation error vulnerability exists in versions prior to uClibc-ng 1.0.37, which stems from being susceptible to integer wrapping by the malloc-simple function. This incorrect memory allocation could lead to arbitrary memory...

[SECURITY] [DSA 4906-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4906-1 [email protected] https://www.debian.org/security/ Michael Gilbert April 27, 2021 https://www.debian.org/security/faq -...

IBM Spectrum Scale File Overwrite Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

Huawei IPS Module和Huawei USG9500 输入验证错误漏洞

Huawei IPS Module is an intrusion prevention system IPS module. Huawei USG9500 is a firewall appliance used in large environments. An information disclosure vulnerability exists in several Huawei products, which stems from a block that does not adequately validate input. An attacker with elevated...

LZ4 输入验证错误漏洞

LZ4 is a lossless compression algorithm. LZ4 1:1.9.3-1 suffers from an input validation error vulnerability that stems from potential memory corruption due to an integer overflow bug that causes a memmove parameter to become negative...

Redmine 输入验证错误漏洞

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . An input validation error vulnerability exists in Redmine versions prior to 4.0.9, 4.1.x series...

Apache Superset Input Validation Error Vulnerability

Apache Superset up is the United States Apache company to provide a large distributed environment in the horizontal scaling design applications. An input validation error vulnerability exists in Apache Superset 1.0.1 and earlier versions, which arises from unchecked user input that opens a redire...

Subreddit Home Automation 输入验证错误漏洞

Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A security vulnerability exists in HomeAutomation 3.3.2, which stems from the input passed in the redirect GET parameter in the api.php script not being properly validated before it is used...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in respip/respip.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in sldnsstr2wirednamebuforigin in versions of Unbound prior to 1.9.5. An attacker could exploit this vulnerability to cause an out-of-bounds write...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which stems from insufficient validation of user-supplied input within the ImageIO component. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

亚马逊 Amazon FreeRTOS 输入验证错误漏洞

Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An integer overflow vulnerability exists in streambuffer.c in Amazon FreeRTOS versions prior to 10.4.3. No details of the vulnerability are provided at this time...