The vulnerability of Google Chrome’s V8 engine, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential information or cause service failures.

The vulnerability of Google Chrome’s V8 engine is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

The vulnerability in the FliDecode.c function from the Pillow image processing library involves reading data beyond the allowed buffer limits. This allows an attacker to access confidential information or cause service failures.

The vulnerability in the function from the libImaging/FliDecode.c library, which is used for working with images in Pillow, involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...

CVE-2021-20595

Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.2...

CVE-2021-20595

Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.2...

Siemens JT2GO 和 Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A buffer over-read vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

The vulnerability of the WriteTIFFImage function in the program for reading and editing ImageMagick graphic files involves reading data beyond the allowed buffer limits. This allows attackers to access confidential information or cause service interruptions.

The vulnerability of the WriteTIFFImage function in the ImageMagick program, which is used for reading and editing graphic files, relates to the reading of data beyond the allowed buffer limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential information or t...

The vulnerability of the WritePNGImage function in the console-based image editing tool ImageMagick involves reading data beyond the allowed buffer size. This allows attackers to access confidential data and cause service interruptions.

The vulnerability of the WritePNGImage function in the console-based ImageMagick graphics editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute arbitrary code and disclose sensitive information.

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

The vulnerability of the search_in_range function in the Oniguruma library, related to reading beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the searchinrange function in the Oniguruma library relates to integer overflow of values. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based machine vision systems lies in the insufficient encryption strength, allowing attackers to compromise protected information and carry out “insider attacks”.

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based vision systems is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose protected information and carry out “insider attacks”...

The vulnerability of the library for simplifying project migration in Libbsd, related to reading beyond the permissible buffer data limits, allows attackers to gain access to confidential data and also trigger service failures.

The vulnerability of the library for simplifying project migration in Libbsd is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

PT-2021-5680 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Storage Spaces Controller driver, which can allow an attacker to gain unauthorized access to protected information. Th...

Siemens SCALANCE FragAttacks

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE family devices Vulnerabilities: Improper Authentication, Injection, Improper Validation of Integrity Check, Improper Input Validation 2. RISK EVALUATION Successful...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute arbitrary code and disclose protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

Hms Networks eCatcher 安全漏洞

Hms Networks eCatcher is a VPN Virtual Private Network client application from the Swedish company HMS Networks. Hms Networks eCatcher suffers from a security vulnerability that stems from weak file system permissions that may allow access by malicious users. An attacker could exploit the...

CVE-2021-29794

IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 203556...

rclone: Weak random number generation

Background rclone is a problem to sync files to and from various cloud storage providers. Description Passwords generated with rclone were insecurely generated and are vulnerable to brute force attacks. Impact Data kept secret with a password generated by rclone may be disclosed to a local...

The vulnerability of the OpenSSH cryptographic protection mechanism lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of the OpenSSH cryptographic protection mechanism lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to disclose the protected information by caching the host key for the server...

The vulnerability of the mysql-wsrep component of the MariaDB database lies in errors during the processing of input data during syntax analysis. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mysql-wsrep component of the MariaDB database is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...