140 matches found
Veritas Technologies Appliance 跨站脚本漏洞
Veritas Technologies Appliance is an application from Veritas Technologies, USA. A security vulnerability exists in Veritas Technologies Appliance version v4.1.0.1. An attacker exploits the vulnerability to send requests to a completely different domain/IP address...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker could exploit the vulnerability to compromise confidentiality and integrity...
Huawei HarmonyOS 代码问题漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a serialization and deserialization vulnerability in modules. An attacker exploiting...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker exploiting this vulnerability could cause availability to be compromised...
Huawei HarmonyOS 授权问题漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker exploiting this vulnerability could cause integrity, confidentiality, and availability to be...
Unspecified vulnerability in FusionDIrectory
FusionDIrectory is an application of FusionDIrectory open source. Used to ensure that the user's identity management security. A security vulnerability exists in FusionDIrectory version 1.3, which stems from a failure to properly handle sessions and can be exploited by an attacker to potentially...
Simple Online Public Access Catalog 跨站脚本漏洞
Simple Online Public Access Catalog OPAC is a web-based application by Carlo Montero Personal Developer. It is used to manage library materials or book databases for a particular school or university. A security vulnerability exists in Simple Online Public Access Catalog v1.0, which stems from th...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a configuration flaw. An attacker exploited the vulnerability to cause availability to...
AMD SEV-legacy 安全漏洞
AMD Secure Encrypted Virtualization is a software application from AMD USA. Hardware-accelerated memory encryption to protect data in use. A security vulnerability exists in the AMD SEV-legacy firmware. An attacker could exploit the vulnerability to cause a loss of integrity or confidentiality of...
The vulnerability of the NameBuff function in the Vim text editor allows a hacker to trigger buffer overflow.
The vulnerability of the NameBuff function in the Vim text editor arises due to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...
The vulnerability of the Microsoft SQL Server relational database management system for the Linux operating system relates to insecure management of privileges, allowing an attacker to elevate their own privileges.
The vulnerability of the Microsoft SQL Server relational database management system for the Linux operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
lemlist: [app.lemlist.com] Improper handling of payment lead to bypass payment
Summary: Hello Team, I truly hope it treats you awesomely on your side of the screen : due to improper handling of payment methods, an attacker can easily bypass the payment and benefit from a paid plan. Steps To Reproduce: 1. Log to your account 1. Go to the billing page 1. Fill in the address t...
kernel: Fragmentation cache not cleared on reconnection
A flaw was found in the Linux kernels implementation of wifi fragmentation handling. An attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where previous contents of wifi fragments can be unintentionally transmitted to another device...
CVE-2021-38450
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
8x8 Bounty: Dangling DNS Record docs.jitsi.net (unsuccessful GSuite takeover)
A dangling DNS record was found for the subdomain docs.jitsi.net, which was abandoned and belonged to GSuite. An attacker could have claimed the subdomain and taken it over, causing potential damage to the website and company. It was recommended to remove the Cname and DNS connecting to it...
FFmpeg integer overflow vulnerability (CNVD-2021-80286)
FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. ffmpeg suffers from an integer overflow vulnerability that could be exploited by an attacker to cause a denial of service or other unspecified impact...
The vulnerability of the vDaemon process in the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.
The vulnerability of the vDaemon process in Cisco SD-WAN is due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of Intel Graphics Driver drivers, related to zero-division errors, allows a hacker to cause a service failure.
The vulnerability of Intel Graphics Drivers’ drivers is related to division by zero errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2020-27822
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...
Design/Logic Flaw
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...