Mongoose-OS 输入验证错误漏洞

Mongoose-OS is an application system. A platform for managing IoT projects. Cesanta Software Mongoose-OS v2.17.0 suffers from an Input Validation Error vulnerability that stems from incorrect memory allocation could lead to arbitrary memory allocation, which could result in unexpected behavior su...

Samsung Galaxy Gear Series Tizen 输入验证错误漏洞

Samsung Galaxy Gear Series Tizen is a smartwatch from Samsung South Korea. Samsung Tizen RT RTOS version 3.0.GBB suffers from an input validation error vulnerability that stems from the effects of integer wrapping in the functions calloc and mm zalloc. This incorrect memory allocation could lead ...

Texas Instruments TI-RTOS-MCU 输入验证错误漏洞

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. Texas Instrument TI-RTOS suffers from an input validation error vulnerability that stems from the fact that when configured to use the HeapMem heap...

Texas Instruments SimpleLink 输入验证错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Texas Instruments SimpleLink 输入验证错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Wind River VxWorks 输入验证错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. An input validation error vulnerability exists in Wind River VxWorks 7 that stems from the fact that this incorrect memory allocation could...

RIOT RIOT-OS 输入验证错误漏洞

RIOT RIOT-OS is a set of operating systems used in the Internet of Things IoT space. RIOT RIOT-OS suffers from an input validation error vulnerability that stems from incorrect memory allocation could lead to arbitrary memory allocation, which could result in unexpected behavior such as a crash o...

eCosCentric eCosPro 输入验证错误漏洞

eCosCentric eCosPro is a software application from eCosCentric, Inc. It combines the feature set, stability and quality of support required for commercial embedded application development with eCos. eCosCentric eCosPro Versions suffers from an Input Validation Error vulnerability that stems from ...

Debian DSA-4906-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-21201 Gengming Liu and Jianyu Chen discovered a use-after-free issue. - CVE-2021-21202 David Erceg discovered a use-after-free issue in extensions. - CVE-2021-21203 asnine discovered a use-after-free issue in...

[SECURITY] [DSA 4906-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4906-1 [email protected] https://www.debian.org/security/ Michael Gilbert April 27, 2021 https://www.debian.org/security/faq -...

IBM Spectrum Scale File Overwrite Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

Huawei IPS Module和Huawei USG9500 输入验证错误漏洞

Huawei IPS Module is an intrusion prevention system IPS module. Huawei USG9500 is a firewall appliance used in large environments. An information disclosure vulnerability exists in several Huawei products, which stems from a block that does not adequately validate input. An attacker with elevated...

Apache Superset Input Validation Error Vulnerability

Apache Superset up is the United States Apache company to provide a large distributed environment in the horizontal scaling design applications. An input validation error vulnerability exists in Apache Superset 1.0.1 and earlier versions, which arises from unchecked user input that opens a redire...

Redmine 输入验证错误漏洞

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . An input validation error vulnerability exists in Redmine versions prior to 4.0.9, 4.1.x series...

SuiteCRM Log File Remote Code Execution

This module exploits an input validation error on the log file extension parameter. It does not properly validate upper/lower case characters. Once this occurs, the application log file will be treated as a php file. The log file can then be populated with php code by changing the username of a...

LZ4 输入验证错误漏洞

LZ4 is a lossless compression algorithm. LZ4 1:1.9.3-1 suffers from an input validation error vulnerability that stems from potential memory corruption due to an integer overflow bug that causes a memmove parameter to become negative...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in respip/respip.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...