108 matches found
The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...
Zephyr 缓冲区错误漏洞
Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A buffer error vulnerability exists in Zephyr that stems from a failure of the product's usb device to properly handle memory boundaries. An attacker could cause a buffer overflow through this...
Microsoft Windows Media Center 权限许可和访问控制问题漏洞
Windows Media Center WMC is a digital video recorder and media player created by Microsoft.An elevation of privilege vulnerability exists in Microsoft Windows Media Center. An attacker could exploit this vulnerability to elevate privileges...
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
...
CVE-2021-21744
ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the device to be disabled...
FileBrowser 跨站脚本漏洞
FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser suffers from a cross-site scripting vulnerability that is caused by improper validation of...
VulnCheck KEV: CVE-2019-1225
An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...
Google TensorFlow 缓冲区错误漏洞
Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow 'tf.rawops.SdcaOptimizerV2'. An attacker can exploit this vulnerability to obtain sensitive information...
The vulnerability of the Windows Hello face recognition component on Microsoft Windows operating systems allows a perpetrator to bypass security measures.
The vulnerability of the Windows Hello facial recognition component on Microsoft Windows operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to bypass security measures...
The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Linux operating system’s kernel is related to incorrect initialization of process identifiers. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the driver/firmware/EFI code of the Linux operating system allows a hacker to bypass security restrictions.
The vulnerability in the driver/firmware/EFI code of the Linux operating system relates to bypassing security functions. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures...
The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to cause a service failure.
The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
hw: Vector Register Leakage-Active
A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...
The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Kernel component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data.
The vulnerability of the Kernel component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...
hw: Vector Register Leakage-Active
A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...
sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations
A NULL pointer dereference was found in SQLite in the way it executes select statements with column optimizations. An attacker who is able to execute SQL statements can use this flaw to crash the application...
The vulnerability of the Windows operating system, related to errors in processing memory objects, allows attackers to escalate their privileges.
The vulnerability of the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Gold Reward has a flawed logic vulnerability
Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...