4742 matches found
DEBIAN-CVE-2020-35494
There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils...
UBUNTU-CVE-2020-35919
An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...
Rust socket crate 安全漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in socket2 crate for Rust prior to version 0.3.16, which stems from its incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability ar...
Plone XXE vulnerability (CNVD-2021-01549)
Plone is an open source content management system. A XXE XML External Entity Injection vulnerability exists in Plone versions prior to 5.2.3. An attacker can exploit this vulnerability to conduct XXE attacks...
Zammad 安全漏洞
Zammad is a Web-based open source helpdesk/customer support system. An access control bypass vulnerability exists in Zammad versions prior to 3.5.1. An Agent with Customer privileges in a group can exploit this vulnerability to bypass access control to internal Articles via the Ticket detail view...
Zammad Security Vulnerability
Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in versions prior to Zammad 3.5.1 that stems from the fact that the default registration role newly created user can be a privileged role configured by an administrator. This behavior w...
cairo Buffer Error Vulnerability
cairo is cairo open source a let used to provide vector graphics drawing free library . Provide in multiple contexts to do two-dimensional space drawing , advanced more can use hardware acceleration . cairo 1.17.4 before the version of the buffer error vulnerability , an attacker exploited the...
ALPINE-CVE-2020-35680
smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...
Raysync Remote Code Execution Vulnerability (CNVD-2020-73753)
Raysync is a cloud platform for storing and transferring large files. A remote code execution vulnerability exists in Raysync versions prior to 3.3.3.8. The vulnerability can be exploited to remotely execute code on a hosted server by sending a specially crafted request to overwrite a specific fi...
MediaWiki cross-site scripting vulnerability (CNVD-2020-74051)
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.35.1 that...
Tangro Business Workflow Code Issue Vulnerability
Tangro Business Workflow is a German Tangro company's internal control of the contents of SAP documents and the approval process for the visual drawing of the software. A code issue vulnerability exists in tangro Business Workflow versions prior to 1.18.1, which stems from requesting a list of...
CVE-2018-1000893
Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...
Bitcoinsv Resource Management Error Vulnerability
Bitcoinsv is a software implementation of the original Bitcoin protocol by the Bitcoinsv Association. The software can be used to build Bitcoin infrastructure. A resource management error vulnerability exists in Bitcoin SV before 0.1.1 that stems from allowing uncontrolled resource consumption wh...
MediaWiki 跨站脚本漏洞
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. MediaWiki before 1.35.1 suffers from a cross-site scripting vulnerability tha...
Phoenix Contact PLCnext Control Devices 输入验证错误漏洞
Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. An input validation error vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which stems from a specially designed LLDP packet tha...
CVE-2020-35122
An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection...
keycloak: Account REST API can update user metadata attributes
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application...
Bitdefender Antivirus Plus 访问控制错误漏洞
Bitdefender Antivirus Plus is a suite of antivirus software from the Romanian company Bitdefender that provides mainly cyber threat detection and ransomware protection. An access control error vulnerability exists in versions prior to Bitdefender Antivirus Plus 25.0.7.29, which stems from a sourc...
GNOME Glib Input Validation Error Vulnerability
GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. An input validation error vulnerability exists in GNOME GLib versions prior to 2.65.3, which stems from an integer overflow, which could result...