CVE-2023-6253 Saved Uninstall Key in Digital Guardian Agent Uninstaller

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00199)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Intel oneAPI Toolkits Security Vulnerability

Intel oneAPI Toolkits is a set of core tools and libraries from the United States Intel Intel. It is used to develop high-performance, data-centric applications across different architectures. A security vulnerability exists in Intel oneAPI Toolkits. An attacker exploiting this vulnerability coul...

Microsoft Azure Security Vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. There is a security vulnerability in Microsoft Azure. An attacker exploiting the vulnerability could bypass certain features...

Intel Server Board Security Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in the Intel Server Board and Server System BIOS firmware. An attacker could exploit this vulnerability to cause an elevation of privilege...

The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ICS Business Manager Security Vulnerability

ICS Business Manager is an application. A security vulnerability exists in ICS Business Manager version 7.06.0028.7066. An attacker could exploit the vulnerability by sending specially crafted strings via the obddact parameter to steal user sessions and perform actions in the application...

The vulnerability of the Glib library, related to the restoration of unreliable data in memory, allows a hacker to cause a service failure.

The vulnerability of the Glib library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the STST TA component in Samsung Teegris’ Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the STST TA component in Samsung Teegris’ Android operating system security system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2023-6867 · Unknown +1 · V-Server Lite +1

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.18.0 and earlier V-Server Lite versions 4.0.18.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability. This can be exploited by a remote attacker using a specially crafted file, potentiall...

PT-2024-7218

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the Remote Access VPN RAVPN service could allow an unauthenticated, remote attacker t...

Google Chrome Security Bypass Vulnerability (CNVD-2024-00157)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from improper implementation of the WebApp Provider module. An attacker could exploit this vulnerability to bypass security restrictions...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.ekimaemc. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...

Google Android Information Disclosure Vulnerability (CNVD-2023-99046)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an incorrect security user interface in the Downloads module. An attacker can exploit this vulnerability to bypass security restrictions...

FFmpeg Out-of-Bounds Read Vulnerability (CNVD-2024-31519)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An out-of-bounds read vulnerability exists in Ffmpeg, which originates from an out-of-bounds read of the dist alphabetsize variable in the readvlcprefix function. An attacker can exploit th...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to gain elevated privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

CVE-2023-4693

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to...

cURL SOCKS5 Heap Overflow Vulnerability

cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...