Ping Identity PingFederate 安全漏洞

Ping Identity PingFederate is a flagship software-based federation server in the United States. It is used for identity management. PingFederate has a security vulnerability that stems from a faulty password reset process in the software. When a password reset or password modification process wit...

AlmaLinux 8 : kernel (ALSA-2021:4356)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4356 advisory. - Insufficient control flow in certain data structures for some IntelR Processors with IntelR Processor Graphics may allow an unauthenticated user to...

Cvx3CrvOracle.sol _peek() returns wrong units

Handle sirhashalot Vulnerability details Impact The Cvx3CrvOracle.sol contract claims it "provides current values for Cvx3Crv". When getting the current values, "only cvx3crvid and ethId are accepted as asset identifiers" for the base and quote parameters to the peek and get functions. peek and g...

The vulnerability of the PostgreSQL adapter for the Rails framework involves an uncontrolled resource consumption, which allows a hacker to cause a service failure.

The vulnerability of the PostgreSQL adapter for the Rails framework is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw that was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU...

CVE-2021-43899

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability...

CVE-2021-43899

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability...

CVE-2021-43899

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability...

Remote code execution

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability...

CVE-2021-43899

CVE-2021-43899 identifies a remote code execution vulnerability in the Microsoft 4K Wireless Display Adapter. Affected product: Microsoft 4K Wireless Display Adapter. POC/root-cause specifics are not detailed in the provided documents, but the CVE is rated CRITICAL (CVSS v3.1 base score 9.8; NETW...

Mercurius code issue vulnerability

Mercurius is a GraphQL adapter Fastify . Mercurius 8.10.0 to 8.11.1 has a code issue vulnerability that could be exploited by an attacker to cause a denial of service attack...

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability

...

Microsoft 4K Wireless Display Adapter 代码注入漏洞

The Microsoft 4K Wireless Display Adapter is a 4K wireless display adapter from Microsoft Corporation USA. A code injection vulnerability exists in the Microsoft 4K Wireless Display Adapter. The vulnerability arises from a network system or product not properly filtering specific elements of...

CVE-2021-43801

Mercurius is a GraphQL adapter for Fastify. Any users from [email protected] to 8.11.1 are subjected to a denial of service attack by sending a malformed JSON to /graphql unless they are using a custom error handler. The vulnerability has been fixed in...

CVE-2021-43801

Mercurius is a GraphQL adapter for Fastify. Any users from [email protected] to 8.11.1 are subjected to a denial of service attack by sending a malformed JSON to /graphql unless they are using a custom error handler. The vulnerability has been fixed in...

Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

GHSA-33GC-6CW9-W3G4 Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

GHSA-8C4J-34R4-XR8G Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS...

GHSA-CVM9-FJM9-3572 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

GHSA-9GPH-22XH-8X98 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...