6561 matches found
Huawei EMUI 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A denial of service vulnerability exists in Huawei...
CVE-2023-52371: NULL Pointer Dereference
Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability...
CVE-2023-52372: Improper Input Validation
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...
CVE-2023-52362: Incorrect Default Permissions
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability...
CVE-2023-52381: Improper Control of Generation of Code
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...
Design/Logic Flaw
Vulnerability in the MySQL Server product of Oracle MySQL component: Server : Security : Firewall. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2024-20982
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
CVE-2024-20962
Removed by vendor...
PT-2024-14547 · Unknown · Vibration Framework
Name of the Vulnerable Software and Affected Versions: Vibration framework affected versions not specified Description: The issue is related to a serialization/deserialization mismatch in the vibration framework. Successful exploitation of this issue may affect availability. Recommendations: At t...
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary CVE-2023-22081 and CVE-2023-22067 were disclosed in the Oracle October 2023 Critical Patch Update. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow a remote attacker to cause no confidentiality impact...
golang: go/parser: stack exhaustion in all Parse* functions
A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...
PT-2024-12964 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite affected versions not specified Description: The issue concerns the processing time of drive search expressions, which is now monitored, and the related request is terminated if a resource threshold is reached. This could reduce...
PT-2024-3099
Name of the Vulnerable Software and Affected Versions Connect2id Nimbus JOSE+JWT versions prior to 9.37.2 Confluence Data Center and Server versions prior to 7.19.23 Confluence Data Center and Server versions prior to 8.5.11 Confluence Data Center and Server versions prior to 8.6.2 Confluence Dat...
PT-2024-20588
Name of the Vulnerable Software and Affected Versions Pimcore's Admin Classic Bundle versions prior to 1.3.3 Description The issue allows an attacker to create, delete, etc., tags without having the permission to do so, due to a broken access control flaw. This can lead to the addition of dummy...
opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system...
Tenda i6 httpd formSetAutoPing Buffer Overflow
The vulnerability of the formSetAutoPing function in the httpd daemon of the microprogrammed wireless access points of Tenda i6 is related to the operation that goes beyond the buffer in memory when processing the parameter ping1. Exploiting this vulnerability can allow an attacker to compromise...
opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system...
Tianocore EDK2 DHCPv6 Proxy Advertise Message Handler Buffer Overflow
The vulnerability of the DHCPv6 Proxy Advertise Message Handler component in the Tianocore EDK2 library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...
opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system...
Security Bulletin: IBM Sterling Transformation Extender is vulnerable to multiple issues due to IBM Java Runtime Environment
Summary IBM Sterling Transformation Extender uses IBM Java Runtime Environment. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component could allow an unauthenticated attacker to cause...