1691 matches found
Microsoft Windows Cryptographic Services 安全漏洞
Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit the vulnerability to disclose sensitive information...
voter-js SQL注入漏洞
voter-js is an application by tingzhang2013 individual developer. A SQL injection vulnerability exists in voter-js. An attacker could exploit this vulnerability to perform a sql injection attack...
email-existence 安全漏洞
email-existence is a library for checking the legitimacy of email messages. A security vulnerability exists in email-existence. An attacker exploited the vulnerability to cause an increase in the complexity of regular expressions...
CVE-2022-41988
An information disclosure vulnerability exists in the OpenImageIO::decodeiptciim functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability...
OpenImageIO heap out-of-bounds read vulnerability
OpenImageIO is an image read and write library that also provides several tools and applications. openImageIO is vulnerable to a heap out-of-bounds read vulnerability. An attacker can exploit this vulnerability to read heap metadata out of bounds via specially crafted RLA files, which can lead to...
Attacker can steal the amount collected so far in the GroupBuy for NFT purchase.
Lines of code Vulnerability details Description purchase in GroupBuy.sol executes the purchase call for the group. After safety checks, the NFT is bought with market's execute function. Supposedly it deploys a vault which owns the NFT. The code makes sure the vault is the new owner of the NFT and...
mschaef toto 跨站脚本漏洞
toto is a to-do list manager by Mike Schaeffer Personal Developer. A security vulnerability exists in mschaef toto version 1.4.20 and earlier versions. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
Siemens Simcenter STAR-CCM Privilege Elevation Vulnerability
Siemens Simcenter STAR-CCM is a complete multi-physics field solution from Siemens Germany that simulates products and designs working under real-world conditions. a security vulnerability exists in Siemens Simcenter STAR-CCM, which stems from improperly assigning file permissions to installation...
CVE-2022-4207
The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...
Microsoft SharePoint 安全漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information.A remo...
Zend-blog-2 跨站请求伪造漏洞
Zend-blog-2 is a framework blog by Alexander Harchenko personal developer. A security vulnerability exists in Zend-blog-2. An attacker can exploit this vulnerability to perform cross-site request forgery attacks...
Google Chrome Security Bypass Vulnerability (CNVD-2023-08277)
Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome, which stems from improper implementation in navigation. An attacker could exploit this vulnerability to bypass security restrictions...
CVE-2022-4174
Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Libarchive Code Execution Vulnerability
libarchive is a multi-format archive and compression library. libarchive A code execution vulnerability exists in libarchive version 3.6.1, which stems from a failure to check for errors after calling the calloc function, i.e., if the function fails, the calloc function returns a NULL pointer,...
The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.
The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...
Google TensorFlow 输入验证错误漏洞
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow is vulnerable to an input validation error that could be exploited by an attacker to cause a denial of service...
kavita 授权问题漏洞
kavita is a fast, feature-rich, cross-platform reading server. An authorization issue vulnerability exists in versions prior to kavita 0.6.0.3, which can be exploited by an attacker to...
Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-51378)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker can...
Microsoft Excel Remote Code Execution Vulnerability (CNVD-2023-53906)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute code on the target host...
