3965 matches found
Accops HyWorks输入验证错误漏洞
Accops HyWorks is a suite of solutions consisting of software and hardware from Accops India. It is used to instantly and securely access enterprise applications remotely from anywhere, on any device and from any network. An integer overflow vulnerability exists in the Accops HyWorks Windows...
Amzetta Technologies Amzetta Zportal 输入验证错误漏洞
Amzetta Technologies Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, Inc. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, prox...
Accops HyWorks DVM Tools 安全漏洞
Accops HyWorks is a suite of solutions consisting of software and hardware from Accops India. It is used to instantly and securely access enterprise applications remotely from anywhere, on any device and from any network. A buffer overflow vulnerability exists in Accops HyWorks DVM Tools, which c...
FlexiHub 安全漏洞
FlexiHub is a way for the FlexiHub team to share and access remote devices. A security vulnerability exists in flexhub For Windows, which can be exploited by a local attacker to cause a denial of service memory corruption and operating system crash by executing arbitrary code in kernel mode or vi...
Nomachine NoMachine 输入验证错误漏洞
NoMachine is a remote desktop access tool from NoMachine Luxembourg. A security vulnerability exists in NoMachine Server, which can be exploited by an attacker to execute arbitrary code in kernel mode or cause a denial of service memory corruption and operating system crash via specially crafted...
Donglify 输入验证错误漏洞
Electronic Team Donglify is an application from Electronic Team, Inc. that shares Usb security keys over the Internet. an integer overflow vulnerability exists in Electronic Team Donglify, which can be exploited by attackers to execute arbitrary code in kernel mode or via specially crafted I/O...
Nomachine NoMachine 输入验证错误漏洞
NoMachine is a remote desktop access tool from NoMachine Luxembourg. A security vulnerability exists in NoMachine Enterprise Client, which can be exploited by a local attacker to cause a denial of service memory corruption and OS crash by executing arbitrary code in kernel mode or via specially...
CVE-2021-31632
b2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter cfqueryparam in the User login section. This vulnerability allows attackers to execute arbitrary code via a crafted input...
Debian DLA-2837-1 : gmp - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2837 advisory. - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentatio...
Updated busybox packages fix security vulnerability
A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input. CVE-2021-42376 An attacker-controlled...
XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet
A flaw was found in xstream. A remote attacker may be able to load and execute arbitrary code from a remote host only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
XStream: arbitrary file deletion on the local host via crafted input stream
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on...
netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data
A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...
Sql injection
Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying speciall...
XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader
A flaw was found in xstream. A remote attacker may be able to execute arbitrary code only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2021-39926
A flaw was found in Wireshark. A process failure on crafted or malformed HCIISO input can cause a denial of service via packet injection or a crafted capture file...
CVE-2021-39920
A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted capture file...
LibreCAD 缓冲区错误漏洞
A buffer error vulnerability exists in LibreCAD, an open source CAD computer-aided design application from the LibreCAD organization, in LibreCad libdxfrw, which stems from the failure of the product's dwgCompressor::copyCompBytes21 function to properly handle special input data. An attacker coul...
