14696 matches found
Apple macOS 权限许可和访问控制问题漏洞
Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A privilege-granting and access-control issue vulnerability exists in the dock component of Apple macOS. The vulnerability stems from an application not properly applying security restrictions to th...
CVE-2021-32556
It was discovered that the getmodifiedconffiles function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg1 call...
PT-2021-18797 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.4 Security Update 2021-003 Catalina versions prior to the fixed version Description: An access issue was addressed with improved access restrictions, allowing a malicious application to potentially access a...
addRegistrationTributeGovernance shoud call_addGovernanceTribute ?
Handle gpersoon Vulnerability details Impact The function addRegistrationTributeGovernance makes a call to addTribute, the same as addRegistrationTribute is doing However a function addGovernanceTribute also exists and this function is never called. It seem more logical that...
GNU cflow Resource Management Error Vulnerability (CNVD-2021-36540)
GNU cflow is a flowchart generator for the GNU community that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in cflow version 1.6, which stems from the existence of a post-release use of the callchar name, int line function in...
GHSA-RMH2-65XW-9M6Q Infinite Loop in jsonparser
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...
Infinite Loop in jsonparser
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...
kernel: race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys, causing a use-after-free in con_shutdown().
A use-after-free flaw was found in the Linux kernel’s Virtual Terminal subsystem in how a user calls the VTDISALLOCATE ioctl during the closing/opening of ttys. This flaw allows a local user to crash the system...
p11-kit: out-of-bounds write in p11_rpc_buffer_get_byte_array_value function in rpc-message.c
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...
DEBIAN-CVE-2020-23856
Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...
CVE-2021-29531
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a CHECK fail in PNG encoding by providing an empty input tensor as the pixel data. This is because the...
CVE-2021-24285
The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL Injection...
Sql injection
The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL Injection...
CVE-2021-24285 Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL Injection...
QNAP NAS Malware Remover Command Injection Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of QNAP NAS. Authentication is required to exploit this vulnerability. The specific flaw exists within the Malware Remover application. A crafted TAR file in the file system can trigger execution of a syste...
OPPO Find x has an information leakage vulnerability
OPPO Find x is a smartphone launched by OPPO Guangdong Mobile Communication Co. OPPO Find x suffers from an information leakage vulnerability. An attacker can utilize a malicious APP to listen to the user's call content through this exposed component by simply applying for the commonly used...
ASUS ZenFone Max Pro (M2) has an information disclosure vulnerability
ASUS ZenFone Max Pro M2 is a smartphone. An information disclosure vulnerability exists in ASUS ZenFone Max Pro M2. An attacker can exploit the vulnerability to listen to the user's calls...
Hisense A5 series cell phones have information leakage vulnerability
Hisense owns two listed companies in Shanghai, Shenzhen and Hong Kong, Hisense Video 600060 and Hisense Home Appliances 000921, and owns a number of brands such as Hisense, Toshiba, Gorenje, Kelon, Ronshen and ASKO. The information disclosure vulnerability exists in Hisense A5 series cell phones...
OS Command Injection in falconchristmas/fpp
✍️ Description FPP - Falcon Player is vulnerable to OS Command injection attacks on ping.php because it doesnt sanitize user supplied parameters as shown below. : Vulnerable variable: count Method: GET The $count variable is constructed using the user supplied data, and then is used in a system...
OS Command Injection in pulverizr
pulverizr through 0.7.0 allows execution of arbitrary commands. Within lib/job.js, the variable filename can be controlled by the attacker. This function uses the variable "filename" to construct the argument of the exec call without any sanitization. In order to successfully exploit this...