Adobe Framemaker 缓冲区错误漏洞

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from a buffer overflow vulnerability that originates when a networked system or product...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Mediatek 芯片 安全漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chip, which originates in the memory management driver and could lead to information disclosure due to a loss of boundary checks. This could result in the disclosure of local...

Mediatek 芯片 缓冲区错误漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in Mediatek chips, which stems from a lack of boundary checking in the memory management driver, which could result in a local elevation of privilege that requires system execution privileges. T...

Mediatek 芯片 缓冲区错误漏洞

The Mediatek chip is a smartphone chipset from China's MediaTek Mediatek. The Mediatek chip suffers from a security vulnerability that originates in the memory management driver, which could lead to a system crash due to a missing boundary check. This could lead to a local denial-of-service attac...

Cisco IOS XE SD-WAN Software 安全漏洞

Cisco IOS XE SD-WAN Software is a Cisco software for network management software-defined networking for the Cisco IOS XE network operating system. A security vulnerability exists in Cisco IOS XE SD-WAN Software, which is caused by insufficient boundary checking when processing traffic on an...

Moodle 权限许可和访问控制问题漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from a permissions licensing and access control issue vulnerability that stems from an insufficient capability check. A...

Apple CoreML 缓冲区错误漏洞

Apple CoreML is Apple's Use Core ML to integrate machine learning models into your applications. Apple CoreML suffers from a buffer error vulnerability that originates from a boundary error within CoreML. An attacker could exploit this vulnerability to trigger a denial of service and execute...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS 15 and iPadOS 15 have a buffer error vulnerability that originates from a boundary error in the attachment manager. A...

Apple macOS Catalina 缓冲区错误漏洞

Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS Catalina and Apple macOS Big Sur, which originates from a boundary error when processing HTML content in WebKit. A remote attacker could use this...

Apple Safari 缓冲区错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari suffers from a buffer error vulnerability that originates from a boundary error when processing HTML content in WebKit. A remote attacker could use this...

The vulnerability of the HTTP cookie files in the Libvirt virtualization management library, related to improper deletion of critical data at the boundary, allows a hacker to access confidential data.

The vulnerability of the HTTP cookie file in the Libvirt virtualization management library is related to the storage of data in the dump XML file of the host domain. Exploiting this vulnerability allows a malicious actor to gain access to confidential data using the dumpxml command...

SUSE SLED12: gtk-vnc-devel / gtk-vnc-lang / gtk-vnc2-devel / libgtk-vnc-1_0-0 / etc (SUSE-SU-2021:3125-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3125-1 advisory. - CVE-2017-5885: Correctly validate color map range indexes bsc1024268. - CVE-2017-5884: Fix bounds checking for RRE,...

WebSphere Application 安全漏洞

WebSphere Application is a U.S. International Business Machines Corporation IBM WebSphere is IBM's modular software platform is a modular software platform, using SOA architecture, contains Web applications and cross-platform, cross-product solutions need the entire middleware infrastructure, can...

McAfee Data Loss Prevention 安全漏洞

Mcafee McAfee Data Loss Prevention DLP is a data loss prevention suite from Mcafee, Inc. that includes components such as McAfee DLP Monitor, McAfee DLP Endpoint, and provides event management and reporting, synchronization of local and cloud DLP policies, and more. A security vulnerability exist...

CVE-2021-40155

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...

in bfabiszewski/libmobi

✍️ Description Overview This vulnerability is of writing user controlled values out of the buffer. The buffer is of MOBIBuffer type which is allocated using malloc. It is possible for the attacker to finally accomplish RCE Remote Code Execution using this out-of-bound write vulnerability to...

Mediatek 芯片 缓冲区错误漏洞

The Mediatek chip is a smartphone chipset from China's MediaTek Mediatek. A buffer error vulnerability exists in the Mediatek chips, which can be exploited by an attacker to cause a denial of service, due to the product's failure to adequately check data boundaries...

QNAP NAS 缓冲区错误漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A security vulnerability exists in QNAP NAS that stems from a boundary error. A remote, unauthenticated attacker could send a specially crafted request to trigger a stack-based buffer overflow and execute arbitrary code on the...

QNAP NAS 缓冲区错误漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A security vulnerability exists in QNAP NAS that stems from a boundary error. A remote, unauthenticated attacker could send a specially crafted request to trigger a stack-based buffer overflow and execute arbitrary code on the...