Adobe Commerce Information Disclosure Vulnerability (CNVD-2024-41459)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an information disclosure vulnerability that can be exploited by an attacker to cause a security feature bypass...

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router. The D-Link DIR-619L suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper access control vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that originates from improper validation of user input. An attacker can exploit the vulnerability to escalate privileges...

PT-2024-7275 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.69 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Extensions, allowing a remote attacker to bypass site isolation via a crafted...

The vulnerability of the shmem_is_huge() function in the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the shmemishuge function in the mm/shmem.c module of the Linux kernel’s memory management subsystem is related to improper memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iommu component in the Linux operating system’s kernel, related to a memory release error, allows for a malfunction that can lead to service failure.

The vulnerability of the iommu component in the Linux operating system’s kernel is related to a memory release error. Exploiting this vulnerability can allow an attacker to cause a system failure...

Cross-site Scripting (XSS)

Mautic is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the ability of an attacker to edit a Mautic form, allowing them to insert malicious HTML that can steal sensitive information from the user's current session...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. An attacker exploits the vulnerability to cause a resource access conflict...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CNVD-2024-39657)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability. An attacker can exploit the vulnerability to cause data contention...

The vulnerability of the avahi_escape_label() function in the Avahi service discovery system, related to the provable assertion that allows a attacker to trigger a service failure.

The vulnerability of the avahiescapelabel function in the Avahi service discovery system is related to a reachable proof. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the ssh_css component in the Linux operating system’s kernel, related to the assignment of NULL pointers, allows an attacker to trigger a service failure.

The vulnerability of the sshcss component in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Android elevation of privilege vulnerability (CNVD-2024-45227)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is due to a race condition in DevmemIntPFNotify in device memserver.c. An attacker can exploit this vulnerability to escalate privileges...

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38795)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

Google Chrome Code Execution Vulnerability (CNVD-2024-38575)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in versions of Google Chrome prior to 128.0.6613.138, which is due to type obfuscation in V8. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Adobe Audition 缓冲区错误漏洞

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product mainly uses a comprehensive toolset that includes multi-track, waveform and spectral display to mix, edit and create audio content. A security vulnerability exists in Adobe Audition, which ca...

Adobe Audition AVI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Audition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AVI...

Cross Site Scripting (XSS)

github.com/alwindoss/akademy is vulnerable to Cross Site Scripting XSS. The vulnerability is caused due to a missing validation and sanitization within cmd/akademy/handler/handlers.go. An attacker can manipulate the argument emailAddress leading to cross site scripting...