10799 matches found
CVE-2020-27356
The CVE-2020-27356 entry concerns the WordPress plugin debug-meta-data (version 1.1.2). The vulnerability is an XSS flaw in this plugin component. Root cause details are not fully enumerated in the provided documents, but the CVSS scores indicate a low to medium overall impact: CVSSv2 base score ...
CVE-2020-27356: Improper Neutralization of Input During Web Page Generation
The debug-meta-data plugin 1.1.2 for WordPress allows XSS...
Qualcomm 芯片代码问题漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A code issue vulnerability exists in multiple Qualcomm products...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
PT-2021-24286
Name of the Vulnerable Software and Affected Versions: rust-embed crate versions prior to 6.3.0 Description: The issue allows attackers to read arbitrary files in the file system if they have control over the filename given, specifically when running in debug mode and the debug-embed feature is n...
PT-2021-30785
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to the net/mlx5e module in the Linux Kernel. It involves the removal of a debug pointer in the mlx5 debug cq remove function. The actual impact and attack plausibility hav...
PT-2021-26755
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.75 through 5.10.81 Description: A potential issue exists in the net/mlx5e component, where the cq-dbg pointer is not properly nullified in the mlx5 debug cq remove function. The actual impact and attack plausibility...
PT-2021-26790
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to a potential security vulnerability in the net/mlx5e module. It involves the nullification of the cq-dbg pointer in the mlx5 debug cq remove function. The actual impac...
PT-2021-30750
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.75 through 5.10.81 Description A potential issue exists in the net/mlx5e module, specifically in the mlx5 debug cq remove function, where the cq-dbg pointer is not properly nullified. The actual impact and attack...
OESA-2021-1443 golang security update
The Go Programming Language. Security Fixes: ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.CVE-2021-41771...
The vulnerability of the debug_fcgid component in the D-Link DWR-932C E1 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the debugfcgid component in the D-Link DWR-932C E1 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
CVE-2021-42784
OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...
D-Link Dwr-932C E1 操作系统命令注入漏洞
The D-Link Dwr-932C E1 is a WiFi mobile modem router from China-based D-Link.A security vulnerability exists in the D-Link DWR-932C E1 firmware, which stems from an OS command injection in debugfcgi. An attacker could exploit this vulnerability to perform command injection via a crafted HTTP...
libdwarf 安全漏洞
libdwarf is a library and command line tool for reading and writing the DWARF2 standardized debug data format. A security vulnerability exists in libdwarf. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...
CVE-2021-1088
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control, which may lead to information disclosure...
CVE-2021-1105
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...
CVE-2021-1105
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...
Information disclosure
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...
CVE-2021-1105
CVE-2021-1105 affects NVIDIA GPU and Tegra hardware, stemming from a vulnerability in the internal microcontroller that could allow a user with elevated privileges to access debug registers at runtime, potentially leading to information disclosure. Connected documents corroborate that the impact ...
CVE-2021-1105
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...