PT-2023-12603 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by addition overflow in the video framework. Successful exploitation may affect availability. Recommendations: At the moment, there...

CVE-2021-46882

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability...

CVE-2021-46881

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability...

CVE-2021-46883

CVE-2021-46883 affects the video framework with memory overwrite caused by an addition overflow. Exploitation could affect availability (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; base score 7.5). Multiple connected documents corroborate: Huawei HarmonyOS security bulletin links; NVD/NVD-enr...

CVE-2021-46881

The CVE-2021-46881 entry concerns a memory overwrite in the video framework caused by an addition overflow, with availability impact. Connected documents reference Huawei HarmonyOS and a video framework memory out-of-bounds issue related to an additive overflow. There are no concrete exploit deta...

PT-2023-12602 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The video framework has a memory overwriting issue caused by an addition overflow. This can affect availability upon successful exploitation. Recommendations: At the moment, there i...

CVE-2021-46886

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability...

CVE-2021-46885

CVE-2021-46885 describes a memory overwrite in the video framework caused by an addition overflow. Multiple sources (NVD/NVD-derived, PRION, PT-SECURITY, CNNVD) corroborate that exploitation could affect availability, with a CVSSv3.1 base score of 7.5 (ATT&CK mapping not explicitly provided in th...

PT-2023-12606 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by an addition overflow in the video framework. This could potentially affect availability upon successful exploitation...

CVE-2021-46886

The CVE-2021-46886 entry concerns a memory overwrite in the video framework due to an addition overflow, affecting availability. Connected sources corroborate a Huawei HarmonyOS context with a memory out-of-bounds/overflow issue in the video framework. The exposed details describe the vulnerabili...

PT-2023-12601 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by addition overflow in the video framework. Successful exploitation may affect availability. Recommendations: At the moment, there...

CVE-2021-46884

CVE-2021-46884 affects the video framework in Huawei HarmonyOS (and related records) with a memory overwrite caused by an addition overflow. The vulnerability can impact availability, with CVSS v3.1 labeled as HIGH (7.5) and exploitability rated NETWORK access, LOW attack complexity, and NO privi...

CVE-2021-46884

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability...

CVE-2021-46885

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability...

CVE-2023-24833

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw data from Hermes VM’s heap. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most...

Oracle Linux 9 : freerdp (ELSA-2023-2326)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2326 advisory. - CVE-2022-39282: Fix length checks in parallel driver 2136152 - CVE-2022-39283: Add missing length check in video channel 2136154 - CVE-2022-39316,...

The vulnerability of the Routing Hub sub-component of the Oracle Banking Virtual Account Management component in the banking analytics system of the Oracle Financial Services Applications allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Routing Hub subcomponent of the Oracle Banking Virtual Account Management component in the banking analytics system of the Oracle Financial Services Applications is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29336 Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. These types of vulnerabilities are...

sunkaifei FlyCms 跨站请求伪造漏洞

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . sunkaifei FlyCms version 1.0 security vulnerabilities , the vulnerability stems from the existence of cross-site request...

CVE-2020-36065

CVE-2020-36065 (FlyCms 1.0) describes a CSRF vulnerability in the FlyCms 1.0 platform that lets an attacker add arbitrary administrator accounts via the endpoint at system/admin/admin_save. The root cause is a CSRF weakness in the admin creation flow, enabling privilege escalation. Reported impac...