13505 matches found
Apple macOS 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...
Apple macOS Big Sur 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error when processing audio files in the CoreAudio subsystem. A remote attacker can exploit the vulnerability to create a specially...
Apple macOS Big Sur 安全漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.5, which stems from a type confusion error in WebKit. A remote attacker can exploit the vulnerability by tricking a victim into opening a specially crafted website, which will...
Apple macOS Big Sur 竞争条件问题漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 is vulnerable to a Competitive Conditions Issue vulnerability that originates in TCC. The vulnerability allows local users to bypass existing security restrictions...
Apple macOS Big Sur 注入漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. An injection vulnerability exists in Apple macOS Big Sur 11.5, which stems from incorrect input validation in the CoreStorage subsystem. A native application can execute arbitrary code using root privileges...
Apple macOS Big Sur 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that originates from a boundary error when handling untrustworthy input in Model I/O. A remote attacker can exploit the vulnerability to create a specially crafte...
Apple macOS Big Sur输入验证错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from insufficient validation of user-supplied input by the Model I/O subsystem. A remote attacker could exploit the vulnerability to trick a...
Apple macOS Big Sur 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error in the Intel Graphics Driver. A local attacker can run a specially designed program to trigger out-of-bounds writes...
Apple macOS Big Sur 输入验证错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from Audio providing insufficient input validation to the user. The vulnerability allows a local user to execute arbitrary code with elevate...
Apple macOS Big Sur 输入验证错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient validation of user-provided input in the CoreAudio subsystem. A remote attacker could exploit the vulnerability to deliver...
Apple macOS Big Sur 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error in the AVEVideoEncoder subsystem. A local attacker can run a specially designed program to trigger memory corruption and execute...
Apple macOS Big Sur 输入验证错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient input validation provided to users in Crash Reporter. The vulnerability allows local users to elevate privileges...
Apple macOS Big Sur 权限许可和访问控制问题漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a Privilege Permission and Access Control Issue vulnerability that originates from a logic error within the OS Kernel subsystem. The vulnerability allows a native application to elevate privilege...
KevinLAB BEMS 1.0 Authenticated File Path Traversal / Information Disclosure
KevinLAB BEMS 1.0 Authenticated File Path Traversal Information Disclosure Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy...
KevinLAB BEMS 1.0 Unauthenticated SQL Injection / Authentication Bypass
KevinLAB BEMS 1.0 Unauthenticated SQL Injection / Authentication Bypass Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy...
KevinLAB BEMS 1.0 Undocumented Backdoor Account
KevinLAB BEMS 1.0 Undocumented Backdoor Account Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy management platform. KevinLAB'...
F5 BIG-IP Edge Client Windows 7.2.1 < 7.2.1.3 / 7.1.6 < 7.1.9.9 Update 1 DLL Hijacking (K33757590)
The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is 7.2.1 before 7.2.1.3, or between 7.1.6 and 7.1.9.9 Update 1. It is, therefore, affected by a DLL hijacking vulnerability. A local attacker can exploit this using a malicious DLL to gain...
F5 Networks BIG-IP : Node.js vulnerability (K07944249)
The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4 / 15.1.4.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K07944249 advisory. - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could...
F5 Networks BIG-IP : Python vulnerabilities (K57542514)
The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the K57542514 advisory. Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding with an...
Weak Password Vulnerability in TopGate500 of Skyrun Technology Group
Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A weak password vulnerability exists in TopGate500 of Tianrongxin Technology Group, which allows an attacker to log in to...