The vulnerability of the Qdrant artificial intelligence-based vector search system lies in the insufficient verification of input data, allowing attackers to write arbitrary files.

The vulnerability of the Qdrant artificial intelligence-based vector search system is related to an incorrect restriction on the path name for the restricted catalog, due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to write arbitrary files by...

CLSA-2024-1718270850 Fix CVE(s): CVE-2023-4016

SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016-2.patch: ps: extended fix of the CVE-2023-4016 - fix possible buffer overflow in -C option. - CVE-2023-4016...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the pktprocfilldataaddrwithoutbm module of linkrxpktproc.c, where out-of-bounds writes may exist...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from an integer overflow in the prepareresponse module of lwisperiodicio.c, where out-of-bounds writes are possible...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the dhdprottxstatusprocess module of dhdmsgbuf.c, which could result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the pl330dmafromperistart module of fpspidma.c, where out-of-bounds writes may exist...

The vulnerability of the IT service management web component Ivanti Neurons for ITSM allows a attacker to write files to arbitrary directories on the ITSM server.

The vulnerability of the IT service management web component Ivanti Neurons for ITSM is related to the unlimited uploading of dangerous files. Exploiting this vulnerability allows a malicious actor to write files to any directory on the ITSM server...

GHSA-CGWC-QVRX-RF7F Remote code execution in pytorch lightning

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

CLSA-2024-1717694505 glibc: Fix of 2 CVEs

CVE-2018-11236: fix stack buffer overflow when realpath input length is close to SSIZEMAX. - CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences...

glibc: Fix of 2 CVEs

CVE-2018-11236: fix stack buffer overflow when realpath input length is close to SSIZEMAX. - CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences...

CLSA-2024-1717694198 glibc: Fix of 2 CVEs

CVE-2018-11236: fix stack buffer overflow when realpath input length is close to SSIZEMAX. - CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences...

Mlflow Security Vulnerabilities

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow that stems from special elements used in operating system commands that are not properly neutralized, which allows an attacker to exploit path traversal or absolute path techniques to enab...

CVE-2024-5463

A vulnerability regarding buffer copy without checking the size of input 'Classic Buffer Overflow' has been found in the login component. This allows remote attackers to write specific files containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors...

AutomationDirect P3-550E Access Control Error Vulnerability

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. An access control error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9, which can be exploited by an attacker to cause arbitrary writes by sending specially crafted network packets...

Qdrant 输入验证错误漏洞

Qdrant is a vector similarity search engine and vector database. An input validation error vulnerability exists in Qdrant versions prior to 1.9.0, which stems from improper input validation at the /collections/name/snapshots/upload endpoint, and can be exploited by an attacker to write and...

PT-2024-10190 · Fortinet · Fortianalyzer +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager, FortiAnalyzer versions 6.2.10 through 6.2.13 Fortinet FortiManager, FortiAnalyzer versions 7.0.2 through 7.0.12 Fortinet FortiManager, FortiAnalyzer versions 7.2.0 through 7.2.5 Fortinet FortiManager, FortiAnalyzer...

Oracle Linux 8 : tigervnc (ELSA-2024-3067)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3067 advisory. - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20388 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap...

AutomationDirect P3-550E 访问控制错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. An access control error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9, which can be exploited by an attacker to cause arbitrary writes by sending specially crafted network packets...

Meshery 安全漏洞

Meshery is a software application. A multi-service grid management plane that provides lifecycle, configuration and performance management of service grids and their workloads. A security vulnerability exists in Meshery versions prior to 0.7.22, which stems from the presence of a SQL injection...

CVE-2021-47489

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix even more out of bound writes from debugfs CVE-2021-42327 was fixed by: commit f23750b5b3d98653b31d4469592935ef6364ad67 Author: Thelford Williams Date: Wed Oct 13 16:04:13 2021 -0400 drm/amdgpu: fix out of bounds...