Splunk 代码注入漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

PHP 缓冲区错误漏洞

PHP is a scripting language that executes on the server side. A buffer error vulnerability exists in versions prior to PHP 8.1.12, which stems from the fact that an attacker can force an invalid memory address to be read via imageloadfont in order to trigger a denial of service or obtain sensitiv...

parse-url 代码问题漏洞

parse-url is an advanced url parser with git url support by the individual developer Ionică Bizău. A security vulnerability exists in parse-url versions prior to 8.1.0. An attacker exploited the vulnerability to perform a server-side request forgery attack...

CVE-2021-27426

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...

DEBIAN-CVE-2022-26127

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...

Palo Alto Networks GlobalProtect 缓冲区错误漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A buffer error vulnerability exists in the Palo Alto Networks GlobalProtect portal and gateway, which can be exploited by an...

Vulnerability fixed in Grafana Enterprise

A vulnerability has been fixed in the Snapshot functionality of Grafana. A malicious party could exploit the vulnerability to obtain sensitive information that should not have been shared with them should have been shared. Under certain circumstances, when "publicmode" is configured, an...

Dell Vnx2 Oe For File 操作系统命令注入漏洞

Dell Vnx2 Oe For File is an operating environment from Dell USA. A remote code execution vulnerability exists in Dell Vnx2 Oe For File version 8.1.21.266 and earlier. An attacker could exploit this vulnerability to execute commands on the system...

CVE-2021-29907

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633...

CVE-2021-29805

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...

Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to cause...

Google Android 信息泄露漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to obtai...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11. No details of the vulnerability are provided a...

UBUNTU-CVE-2021-32565

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

Avaya Aura Appliance Virtualization Platform Utilities (AVPU) 安全漏洞

Avaya Aura AVPU is an application virtualization platform utility from Avaya, USA. It provides functionality for the AVP platform, such as AVP alarm and log collection, dual-stack support, service access, and out-of-band management. A security vulnerability exists in the Avaya Aura Appliance...

IBM Spectrum Protect 缓冲区错误漏洞

IBM Spectrum Protect is a data protection platform that provides organizations with a single point of control and management for backup and recovery.IBM Spectrum Protect Server is the server of the... A stack buffer overflow vulnerability exists in IBM Spectrum Protect Server versions 7.1 and 8.1...

Google Android Media framework information disclosure vulnerability (CNVD-2020-27131)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in the Media framework in Android versions 8.0 and 8.1. An attacker could exploit this...

CVE-2020-1981

A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only...

CVE-2019-4267

The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...

CVE-2018-20807

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly...