The vulnerability of the mail client in operating systems such as iOS, iPadOS, and watchOS allows a hacker to trigger a service failure.

The vulnerability of the email client in operating systems such as iOS, iPadOS, and watchOS is related to the operation of writing data beyond the buffer in memory when processing malicious email messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2021-38665

Remote Desktop Protocol Client Information Disclosure Vulnerability...

MQTT 缓冲区错误漏洞

MQTT Message Queuing Telemetry Transport is a messaging protocol based on the Publish/Subscribe paradigm under the ISO standard ISO/IEC PRF 20922, which works on the TCP/IP protocol family and is designed as a publish/subscribe messaging protocol for remote devices with low hardware performance a...

Security Bulletin: FileNet Content Manager is affected by a HTTP Client vulnerability

Summary FileNet Content Manager has addressed the following HTTP Client v3.0.1 and v4.0.1 vulnerability. Vulnerability Details CVEID: CVE-2012-5783 DESCRIPTION: Apache Commons HttpClient, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, could allow a remote...

CVE-2021-31354

An Out Of Bounds OOB access vulnerability in the handling of responses by a Juniper Agile License JAL Client in Juniper Networks Junos OS and Junos OS Evolved, configured in Network Mode to use Juniper Agile License Manager may allow an attacker to cause a partial Denial of Service DoS, or lead t...

spotweb 跨站脚本漏洞

Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team. 1.5.1 and previous versions of Spotweb have a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...

SupportAssist Client 代码问题漏洞

Dell SupportAssist Client is a client application from Dell DELL, USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. Dell SupportAssist Client has a code issue vulnerability that can be exploited by attackers to load arbitrary .dll files using .dll...

golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header

A vulnerability was detected in net/http of the Go standard library when parsing very large HTTP header values, causing a crash and subsequent denial of service. This vulnerability affects both clients and servers written in Go, however, servers are only vulnerable if the value of MaxHeaderBytes...

PT-2021-5222 · Zoom · Zoom Meeting Sdk For Android +21

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings versions 5.8.3 and earlier Zoom Client for Meetings for Blackberry versions 5.8.0 and earlier Zoom Client for Meetings for intune versions 5.8.3 and earlier Zoom Client for Meetings for Chrome OS versions 5.0.0 and...

golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header

A vulnerability was detected in net/http of the Go standard library when parsing very large HTTP header values, causing a crash and subsequent denial of service. This vulnerability affects both clients and servers written in Go, however, servers are only vulnerable if the value of MaxHeaderBytes...

PT-2021-3814

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A remote code execution issue exists in the Remote Desktop Client for Microsoft Windows. The flaw is caused by a memory buffer out-of-bounds operation, which allows a remote...

MGASA-2021-0380 Updated filezilla packages fix security vulnerability

filezilla embeds a PuTTY client that was vulnerable: PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by...

Nextcloud Trust Management Issues Vulnerability (CNVD-2021-42394)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud, which stems from the vulnerability of the Nextcloud desktop client prior to 3.3.1 to incorrect certificate...

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

...

Dino 路径遍历漏洞

Dino is an open source chat client application for desktop from the Dino DINO team. Dino suffers from a path traversal vulnerability that stems from Dino prior to 0.1.2 and 0.2 failing to properly filter for special elements in the path of a resource or file. An attacker could use this...

The vulnerability of the SMB Client component of Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SMB Client component of Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Client component of the Oracle Secure Global Desktop software allows a perpetrator to gain full control over the application or execute arbitrary code.

The vulnerability of the Client component of the Oracle Secure Global Desktop software lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain full control over the application or execute arbitrary code using the TLS protocol...

IBM Spectrum Protect 安全漏洞

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical, and cloud environments of...

IBM Spectrum Protect 缓冲区错误漏洞

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

OMERO.web 信息泄露漏洞

OMERO.web is a client program from the Open Microscopy Environment team for viewing images on the OMERO server from a web browser. An information disclosure vulnerability exists in OMERO.web that stems from the exposure of page information...