GitLab Enterprise Edition和GitLab Community Edition 输入验证错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in Gitlab CE/EE versions 11.4 through 15.5.7, 15.6...

Alotcer AR7088H 输入验证错误漏洞

The Alotcer AR7088H is an embedded edge router from Alotcer China. A security vulnerability exists in the Alotcer AR7088H firmware version 16.10.3, which stems from incorrect validation of unspecified input fields for command execution, allowing authenticated command execution...

Adobe InCopy 输入验证错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

AMD Athlon 输入验证错误漏洞

AMD Athlon is a family of microprocessors from UltraMicroelectronics AMD. An input validation error vulnerability exists in AMD Athlon™ Processors, Ryzen™ Processors, and Threadripper™ Processors, which stems from a failure to validate that communication buffers and communication services in the...

GHSA-2PJ2-GCHF-WMW7 Zip4j Origin Validation Error

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...

Pandora 输入验证错误漏洞

Pandora is an analysis framework for finding out if a file is suspicious and displaying the results conveniently. A security vulnerability exists in Pandora version 1.3.0, which stems from the fact that workers/extractor.py allows denial of service when an attacker submits a deeply nested ZIP...

bzip2 输入验证错误漏洞

bzip2 is an open source compression/decompression application. A security vulnerability exists in bzip2-rs, which stems from allowing an attacker to cause a denial of service via a large file, which triggers an integer overflow in mem.rs...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the presence of integer overflows and buffer overflows that result in memory corruption. The following products are affected: APQ8064AU, APQ8096AU,...

GPAC MP4Box 输入验证错误漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. An input validation error vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which...

go-ipld-prime 输入验证错误漏洞

go-ipld-prime is an IPLD open source implementation of the ipld specification interface. A input validation error vulnerability exists in go-ipld-prime, which stems from the fact that its encoded data containing Bytes class nodes will pass a Bytes token to the JSON encoder, since it does not expe...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that is exploited by attackers to escalate privileges without additional execution privileges...

UNISOC chipset 输入验证错误漏洞

The UNISOC chipset is an integrated circuit chipset from China's Ziguang Zhanrui UNISOC. The UNISOC chipset suffers from an input validation error vulnerability that stems from a lack of boundary checking in the wlan driver, which could lead to a local denial of service in the wlan service...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from an input validation error vulnerability that stems from an issue with a Qualcomm closed-source component...

http4s 输入验证错误漏洞

http4s is an open source streaming HTTP server for Scala. An input validation error vulnerability exists in several versions of http4s, which stems from the fact that its User-Agent and Server header parsers are prone to fatal errors in processing certain input. The following versions are affecte...

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a mishandling in the Wi-Fi driver that could result in undefined behavior, which could lead to a local privilege escalation that requir...

kenny2automate 输入验证错误漏洞

kenny2automate is a small Discord bot by the individual developers at AbyxDev. An input validation error vulnerability exists in previous versions of kenny2automate a947d7c, which stems from a failure to perform validation to ensure that the submitted channel ID actually belongs to the server bei...

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal for ArcGIS version 11 an...

Rdiffweb 输入验证错误漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. An input validation error vulnerability exists in Rdiffweb versions prior to 2.5.5, which originates from a hyperlink injection via a...

i18n 输入验证错误漏洞

i18n is a Macaron open source package . It provides internationalization and localization middleware for Macaron applications. An input validation error vulnerability exists in versions of i18n prior to 0.5.0, which stems from a problem with an unknown function in the file i18n.go that results in...