Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Media in versions prior to Google Chrome 88.0.4324.96. A remote attacker can cause heap damage via a carefully crafted...

CVE-2020-28478

This affects the package gsap before 3.6.0...

FasterXML jackson-databind 代码问题漏洞

FasterXML jackson-databind is a JAVA-based data formats such as XML and JSON and JAVA objects can be converted to the library . Jackson can easily convert Java objects into json objects and xml documents , the same can be converted to json, xml Java objects . A code issue vulnerability exists in...

Linux kernel path traversal vulnerability (CNVD-2021-05132)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.10.7, which stems from insufficient identifier checking in drivers/target/targetcorexcopy.c, and can be...

CVE-2021-23835

An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docsfile HTTP request body parameter for the acp interface. This can be exploited with admin access rights. The affected parameter which retrieves the contents of the specified...

CVE-2021-0212

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...

Cisco Video Surveillance 8000 Series IP Cameras 缓冲区错误漏洞

The Cisco Video Surveillance 8000 series is a video surveillance IP camera from Cisco. A denial of service vulnerability exists in the Cisco Discovery Protocol implementation of the Cisco Video Surveillance 8000 Series prior to version 1.0.9-8, which can be exploited by an attacker to cause the...

PT-2021-11537

Name of the Vulnerable Software and Affected Versions: glob-parent versions prior to 5.1.2 Description: The issue is related to the enclosure regex used to check for strings ending in enclosure containing path separator. Recommendations: For versions prior to 5.1.2, update to version 5.1.2 or lat...

ALPINE-CVE-2021-3121

An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue...

Citrix Secure Mail For Android Access Control Error Vulnerability

Citrix Secure Mail For Android is an email client software from Citrix. An access control error vulnerability exists in Citrix Secure Mail for Android in versions prior to 20.11.0. The vulnerability is related to the affected version allowing unauthenticated users to read calendar-related data...

Citrix Secure Mail For Android Code Injection Vulnerability

Citrix Secure Mail For Android is an email client software from Citrix, Inc. A code injection vulnerability exists in Citrix Secure Mail for Android before 20.11.0, which allows unauthenticated access to read data stored in Secure Mail...

WordPress PageLayer plugin license issue vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress PageLayer plugin versions prior to 1.1.2 that stems fro...

DEBIAN-CVE-2020-35494

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils...

UBUNTU-CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

Rust socket crate 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in socket2 crate for Rust prior to version 0.3.16, which stems from its incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability ar...

Plone XXE vulnerability (CNVD-2021-01549)

Plone is an open source content management system. A XXE XML External Entity Injection vulnerability exists in Plone versions prior to 5.2.3. An attacker can exploit this vulnerability to conduct XXE attacks...

cairo Buffer Error Vulnerability

cairo is cairo open source a let used to provide vector graphics drawing free library . Provide in multiple contexts to do two-dimensional space drawing , advanced more can use hardware acceleration . cairo 1.17.4 before the version of the buffer error vulnerability , an attacker exploited the...

Zammad Security Vulnerability

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in versions prior to Zammad 3.5.1 that stems from the fact that the default registration role newly created user can be a privileged role configured by an administrator. This behavior w...

Zammad 安全漏洞

Zammad is a Web-based open source helpdesk/customer support system. An access control bypass vulnerability exists in Zammad versions prior to 3.5.1. An Agent with Customer privileges in a group can exploit this vulnerability to bypass access control to internal Articles via the Ticket detail view...