Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a memory out-of-bounds vulnerability in the video framework due to an additive overflow...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a memory out-of-bounds vulnerability in the video framework due to an additive overflow...

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by multiple vulnerabilities in IBM® Runtime Environment Java™

Summary Multiple vulnerabilities were disclosed as part of the Oracle October 2021 Critical Patch Update. Vulnerability Details CVEID:CVE-2021-35560 DESCRIPTION: An unspecified vulnerability in Java SE related to the Deployment component could allow an unauthenticated attacker to take control of...

PT-2023-36799

Уязвимость функции skb copy ubufs модуля net/core/skbuff.c поддержки сетевых функций ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

UBUNTU-CVE-2023-21911

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

SourceCodester E-Commerce System setDiscount.php Data Compromise

The vulnerability in the ecommerce/admin/settings/setDiscount.php file of the SourceCodester E-Commerce System is related to the lack of protection for SQL query structures. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop/paypal versions 3.12.0 through 3.16.3. An attacker could...

CVE-2023-26548

The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability...

CVE-2022-48351

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability...

haproxy: segfault DoS

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...

CVE-2022-48349: Authentication Bypass by Spoofing

The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability...

CVE-2022-48351

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability...

CVE-2023-26548

The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability...

PT-2023-15728 · Unknown · Secure Os Module

Name of the Vulnerable Software and Affected Versions: Secure OS module affected versions not specified Description: The issue is related to configuration defects in the secure OS module. It may impact availability if successfully exploited. Recommendations: At the moment, there is no information...

PT-2023-15725 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Control component affected versions not specified Description: The issue is related to a spoofing vulnerability in the control component. Successful exploitation of this vulnerability may impact confidentiality and availability...

CVE-2023-26548: Deserialization of Untrusted Data

The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability...

PT-2023-20722 · Pgmng · Pgmng

Name of the Vulnerable Software and Affected Versions: pgmng module affected versions not specified Description: The issue concerns a vulnerability in the serialization/deserialization process of the pgmng module. Successful exploitation may impact availability. Recommendations: At the moment,...

Google Chrome CSS Data Compromise

The vulnerability of the Google Chrome browser’s CSS component is related to errors in data type conversion. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

CVE-2023-0056

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...

golang: io/fs: stack exhaustion in Glob

A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...