DEBIAN-CVE-2020-35921

An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in miow crate for Rust prior to version 0.3.6, which stems from an incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability are...

kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c

An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location ...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality of protected information.

Vulnerability exists in the Microsoft .NET Framework, and it allows attackers to circumvent the ASLR protection mechanism, which safeguards users against a wide range of vulnerabilities. Simply bypassing the protection mechanism itself does not allow the execution of arbitrary code. However,...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in the Adobe Flash Player due to the possibility of accessing information related to memory addresses. Exploiting this vulnerability allows attackers to bypass the ASLR Address Space Layout Randomization protection mechanism...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the dynamically linked GDI32.dll library of the Windows operating system’s Graphics component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

Linux Kernel ASLR Implementation Insufficient Moisture Vulnerability

Linux Kernel is an open source operating system. The Linux Kernel ALSR implementation suffers from an insufficient moisture problem that allows attackers to exploit vulnerabilities to bypass security restrictions through brute force techniques for further attacks...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8773 / 8774)

This update fixes the following security issues with flash-player : - flash-player: security protection bypass bnc858822APSB14-02 - These updates resolve a vulnerability that could be used to bypass Flash Player security protections. CVE-2014-0491 - These updates resolve an address leak...

Flash Player for Mac <= 11.7.700.257 / 11.9.900.170 Multiple Vulnerabilities (APSB14-02)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 11.7.700.257 / 11.8.x or 11.9.x equal or prior to 11.9.900.170. It is, therefore, potentially affected by the following vulnerabilities : - An unspecified vulnerability exists that ca...