FFmpeg heap buffer overflow vulnerability (CNVD-2021-39759)

FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in crossfadesamplesfltp in libavfilter/afafade.c in FFmpeg version 4.2. An attacker can exploit this vulnerability to cause memory corruption...

ZenFone 4 Max (ZC520KL) suffers from an information disclosure vulnerability

ZenFone 4 Max ZC520KL is a smartphone. An information disclosure vulnerability exists in ZenFone 4 Max ZC520KL. An attacker can exploit the vulnerability to obtain sensitive information...

Google Chrome post-release reuse vulnerability (CNVD-2021-41140)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability in WebAuthentication in versions prior to Google Chrome 91.0.4472.77 can be exploited by a remote attacker to corrupt the rendere...

Shopizer Cross-Site Scripting Vulnerability

Shopizer is a Java open source e-commerce software. A stored cross-site scripting vulnerability exists in Shopizer versions prior to 2.17.0. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML via the customername in various forms managed by the store...

The vulnerability of the “forward first” DNS server mode in Bind9, which allows a attacker to cause a service failure.

The “forward first” mode of the Bind9 DNS server has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures...

Red Hat Wildfly Cross-Site Scripting Vulnerability

Red Hat Wildfly is the United States Red Hat Red Hat, Inc. of a lightweight JavaEE-based open source application server . A cross-site scripting vulnerability exists in Red Hat Wildfly versions prior to 23.0.2. An attacker can exploit this vulnerability by adding a payload to the name field to...

Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from the American company Cisco Cisco. An input validation error vulnerability exists in the Cisco Small Business product, which results from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection fo...

node-mpv formatting string error vulnerability

node-mpv is a Node.js based MPV player module. A security vulnerability exists in mpv version 0.33.0 and earlier versions, which can be exploited by an attacker to achieve code execution via a crafted m3u playlist file...

Weak Password Vulnerability in Huawei Technologies S5700 Series Switches

Founded in 1987, Huawei Technologies Co., Ltd. is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the S5700 series switches of Huawei Technologies Co. that can be exploited by attackers to obtain sensitive...

Google TensorFlow SparseDenseCwiseMul Heap Out-of-Bounds Access Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A heap out-of-bounds access vulnerability exists in Google TensorFlow SparseDenseCwiseMul. An attacker can exploit the vulnerability by passing an invalid parameter to "tf.raw\u ops.backpropinput" to write outside the...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36647)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionrevhistory ... /... /src/decode.c:3051 to exploit the vulnerability and cause a heap buffer...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36636)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004compressedsection ... /... /src/decode.c:2379 to cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36648)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via bitreadRC ... /... /src/bits.c:318 to cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36629)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via the outputTEXT ... /... /programs/dwg2SVG.c:114 to cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36645)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitsearchsentinel ... /... /src/bits.c:1985 to cause a heap buffer overflow...

GNU LibreDWG Memory Leak Vulnerability

LibreDWG is a free C library for reading and writing DWG files. GNU LibreDWG version 0.10 in dwgdecodeeed ... /... A memory leak vulnerability exists in /src/decode.c:3638. An attacker could cause a memory leak by exploiting this vulnerability via specially crafted input...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36630)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via the htmlwescape ... /... /programs/escape.c:97 to exploit the vulnerability and cause a heap buffer overflo...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36637)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitcalcCRC ... /... /src/bits.c:2213 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36638)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004compressedsection ... /... /src/decode.c:2417 to cause a heap buffer overflow...

IBM QRadar User Behavior Analytics Information Disclosure Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...