Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 88.0.4324.96. An attacker can cause heap damage via a crafted HTML page...

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

...

Privacy breaches: Using Microsoft 365 Advanced Audit and Advanced eDiscovery to minimize impact

GDPR, HIPAA, GLBA, all 50 U.S. States, and many countries have privacy breach reporting requirements. If an organization experiences a breach of customer or employee personal information, they must report it within the required time frame. The size and scope of this reporting effort can be massiv...

Web Servers Memory Corruption Attempt (CVE-2020-12000; CVE-2020-13934; CVE-2020-3239; CVE-2020-9490)

A memory corruption vulnerability can be exploited by malicious actors. Successful exploitation could cause damage to target systems...

Pligg CMS Cross Site Request Forgery (CVE-2015-6655)

A cross site request forgery vulnerability exists in Pligg CMS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)

A vulnerability exists in Cisco Firepower Management Center. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Oracle Fusion Middleware OiT Component Multiple Vulnerabilities (CVE-2016-3593)

Multiple vulnerabilities exist in Oracle Fusion Middleware Outside in Technology component. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

Design/Logic Flaw

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

CVE-2020-27816

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...

CVE-2020-27816

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...

Oracle Fusion Middleware Cross-Site Scripting (CVE-2010-3581)

A vulnerability exists in Oracle Fusion Middleware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Netflix Titus Remote Code Execution (CVE-2020-9297)

A remote code execution vulnerability exists in Netflix Titus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system that will damage users system...

Adobe Acrobat and Reader Memory Corruption (APSB20-67: CVE-2020-24427)

A memory corruption vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microweber Local Session Hijacking Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A local session hijacking vulnerability exists in Microweber. An attacker could use this...

Adobe Acrobat and Reader Improper Authorization (APSB20-67: CVE-2020-24432)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Google Chrome Buffer Overflow Vulnerability (CNVD-2020-62478)

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 86.0.4240.99. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries,...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62479)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in versions of Google Chrome prior to 86.0.4240.99. The vulnerability stems from improper management of system resources e.g., memory, disk space, files, etc. by a networked system or...

Cisco Unified IP Conference Station Privilege Escalation (CVE-2020-16137)

A Privilege Escalation vulnerability exists in Cisco Unified IP Conference Station. Successful exploitation of this vulnerability could allow a remote attacker to create new users with elevated privileges and by that damage the affected system...

Google Chrome ANGLE Policy Enforcement Deficiency Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An ANGLE policy under-enforcement vulnerability exists in versions of Google Chrome prior to 86.0.4240.183. A remote attacker could potentially exploit this...