GE Grid Solutions UR 输入验证错误漏洞

GE Grid Solutions UR is an embedded operating system from GE Grid Solutions, France. It provides high-performance protection, scalable I/O, integrated monitoring and metering, high-speed communications, and extensive programming and configuration capabilities. An input validation error...

USN-4800-1 lynx vulnerabilities

It was discovered that Lynx incorrectly handled certain URLs. A remote attacker could possibly use this issue to obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM. CVE-2016-9179 It was discovered that Lynx incorrectly handled certain HTML files. A...

The vulnerability of the opj_get_encoding_parameters function (openjp2/pi.c) in the OpenJPEG encoding and decoding library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the opjgetencodingparameters function openjp2/pi.c in the OpenJPEG encoding and decoding library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failur...

(Vulnerability) The vulnerability of the `show_transport_handle` function in Linux kernel allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the showtransporthandle function /scsi/scsitransportiscsi.c in the Linux operating system kernel is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the TrioParse component in the implementation of the remote desktop protocol FreeRDP allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the TrioParse component in the FreeRDP remote desktop protocol lies in its ability to read data from a buffer beyond acceptable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the `Parser::makeStream` function in the Poppler PDF rendering library allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Parser::makeStream function in the Poppler PDF rendering library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the rom_copy function in hw/core/loader.c of the QEMU hardware emulation software allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the romcopy function in hw/core/loader.c of the QEMU hardware emulation software is related to the execution of operations within the acceptable data buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise i...

The vulnerability of the ndr_pull_dnsp_name parser in the Samba networking software package arises from allowing output operations to exceed the allowable buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ndrpulldnspname parser in the Samba networking software package is related to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause...

CVE-2021-21075

Adobe Animate version 21.0.3 and earlier is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...

CVE-2021-21076

Adobe Animate version 21.0.3 and earlier is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...

CVE-2021-0458

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0453

CVE-2021-0453 corresponds to a vulnerability in the Titan-M firmware (and related Android kernel component) where uninitialized data can cause a disclosure of stack memory, leading to local information disclosure with system-level privileges required. The public descriptions consistently state th...

Fixed in Apache Tomcat 9.0.44

Important: Denial of Service CVE-2021-41079 When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service. This was fixed with commit d4b340fa. This issue was first reported to the Apach...

CVE-2021-22134

A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently updated document. This affects documents that have been...

PT-2021-5764 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: htmldoc versions 1.9.11 and earlier Description: The issue is related to an integer overflow that may allow attackers to execute arbitrary code and cause a denial of service. Exploitation of this issue can allow a remote attacker to access...

The vulnerability of the gdhcp component of the Connman connection controller allows a hacker to exploit it to disclose protected information.

The vulnerability of the gdhcp component in the Connman connection controller is related to a memory release error. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this security mechanism...

MB CONNECT LINE mymbCONNECT24e 代码问题漏洞

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A server-side request forgery vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android suffers from a security vulnerability that stems from a lack of bounds checking in Parseins in easmdls.c, which may write out of bounds. This could lead to the disclosure of...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android 11 suffers from an information disclosure vulnerability. The vulnerability stems from a heap buffer overflow in getNbits of pvmp3getbits.cpp. An attacker can exploit the...

The vulnerability of the JUnit4 library, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the JUnit4 library is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...