Google Chrome URL Formatting Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome URL formatting. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Extension Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Extensions. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Referrer Misimplementation Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Referrer improperly implemented vulnerability exists in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit the vulnerability to bypass...

Google Chrome Autofill Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2021-14179)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 89.0.4389.72. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Extensions. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Performance API Security Bypass Vulnerability (CNVD-2021-14185)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...

Stack overflow vulnerability in wps text

wps text is a text editing and processing software. A stack overflow vulnerability exists in wps text, which can be exploited by an attacker to gain control of the server...

Google Android System Information Disclosure Vulnerability (CNVD-2021-17301)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit the vulnerability to obtain...

EPrints Arbitrary File Read Vulnerability (CNVD-2021-14737)

EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. An arbitrary file read vulnerability exists in EPrints 3.4.2. A remote attacker can exploit this vulnerability by entering a specially crafted LaTeX into cgi/latex2png?latex=...

Nexus Series Fabri Access Control Error Vulnerability

Cisco Nexus 9000 Series Fabric Switches is a 9000 series fiber optic switch from Cisco USA. A security vulnerability exists in the Nexus 9000 Series Fabri that can be exploited by an attacker to disable switching on SFP interfaces, which could disrupt the network...

Mingyuan Cloud - Command Execution Vulnerability in Data Center

Shenzhen Mingyuan Cloud Technology Co., Ltd hereinafter referred to as: Mingyuan Cloud, is a real estate ecosystem digital service provider. A command execution vulnerability exists in Mingyuan Cloud-Data Center. An attacker can exploit the vulnerability to gain server privileges...

Unauthorized Access Vulnerability in MAS Mobile Proxy Server of China Mobile Communications Ltd.

MAS Mobile Proxy Server is an access tool to assist the original business systems of enterprises to realize wireless applications. An unauthorized access vulnerability exists in the MAS mobile proxy server of China Mobile Communications Corporation, which can be exploited by an attacker to access...

Mailtrain SQL Injection Vulnerability

Mailtrain is an open source hosted newsletter application built on Node.js and MySQL/MariaDB. A SQL injection vulnerability exists in Mailtrain 1.24.1 and earlier in lib/models/campaigns.js in statsClickedSubscribersByColumn. The vulnerability stems from not properly escaping variable column name...

Command Execution Vulnerability in HYBBS V2.3.2 Backend

HYBBS is a lightweight community forum program. A command execution vulnerability exists in the backend of HYBBS V2.3.2. An attacker can exploit this vulnerability to gain server privileges...

Linux kernel io_grab_files() denial of service vulnerability

Linux Kernel is an open source operating system. A security vulnerability exists in Linux kernel iograbfiles, which can be exploited by a local attacker to submit a special request that can crash the system...

Denial of service vulnerability in Intel® 7360 Cell Modem firmware

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. A denial of service vulnerability exists in the Intel® 7360 Cell Modem firmware, which can be exploited by an attacker to cause a denial of service...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. There are security vulnerabilities in the Linux kernel. An attacker can exploit the vulnerability to cause the kernel to crash...

Microsoft Windows TCP/IP Remote Code Execution Vulnerability

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. A remote code execution vulnerability exists in Microsoft Windows TCP/IP, which can be triggered by constructing special IP source routing packets, and an attacker who...

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...