17061 matches found
Security Bulletin: IBM Informix Dynamic Server in Cloud Pak for Data is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)
Summary Apache Log4j library CVE-2021-45105, CVE-2021-45046 is used to provide logging functionality for IBM Informix Dynamic Server in Cloud Pak for Data CP4D. The fix includes Apache Log4j 2.17.1. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
CVE-2021-35088
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure...
Hitron Technologies CHITA Router Firmware 操作系统命令注入漏洞
Hitron Technologies CHITA Router Firmware is a router firmware from Hitron Technologies of China. A security vulnerability exists in the Hitron CHITA 7.2.2.0.3b6-CD firmware version that originates from a command injection in the Device/DDNS ddnsUsername field...
dnsmasq 资源管理错误漏洞
dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. A resource management error vulnerability exists in dnsmasq that stems from a post-release reuse error when processing DHCPv6 requests. A remote attacker could send specially crafted DHCPv6 packets to an affected...
CVE-2022-25348
Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...
CVE-2022-22996
The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user...
AttacheCase may insecurely load Dynamic Link Libraries
Overview AttacheCase may insecurely load Dynamic Link Libraries. AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Taizoh Tsukamoto of...
HiBARA Software AttacheCase 代码问题漏洞
HiBARA Software AttacheCase is a powerful file/folder encryption software from the Japanese individual developer Hibara Mitsuhiro. A code issue vulnerability exists in HiBARA Software AttacheCase version 3.6.1.0, which arises from an application loading DLL libraries in an insecure manner. A remo...
HiBARA Software AttacheCase 代码问题漏洞
HiBARA Software AttacheCase is a powerful file/folder encryption software from the Japanese individual developer Hibara Mitsuhiro. A code issue vulnerability exists in HiBARA Software AttacheCase version 4.0.2.7, which arises from loading DLL libraries in an insecure manner. A remote attacker can...
Apache Apisix Input Validation Error Vulnerability
Apache Apisix is a cloud-native microservices API gateway service from the Apache Foundation. The software is based on OpenResty and etcd, with dynamic routing and plugin hot-loading for API management in microservices systems. An attacker could use this vulnerability to bypass the bodyschema...
Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2022-042d9c6146)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability in the WPS Presentation creation application of the WPS Office office software package arises from the loading of a non-existent dynamic library. This allows an attacker to escalate their privileges and execute arbitrary code.
The vulnerability of the WPS Presentation creation application within the WPS Office office software package is related to the loading of a non-existent dynamic library, d3dx941.dll. Exploiting this vulnerability can allow an attacker to elevate their privileges and execute arbitrary code...
The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack allows a attacker to gain unauthorized access to protected information.
The vulnerability in the DHCPv6 protocol implementation of the Trace TCP/IP stack is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the installer component of the WPS Office office software package is related to the loading of a dynamic library that does not exist. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
Ostorlab - A Security Scanning Platform That Enables Running Complex Security Scanning Tasks Involving Multiple Tools In An Easy, Scalable And Distributed Way
The Sales Pitch If this is the first time you are visiting the Ostorlab Github page, here is the sales pitch. Security testing requires often chaining tools together, taking the output from one, mangling it, filtering it and then pushing it to another tool. Several tools have tried to make the...
[SECURITY] Fedora 34 Update: bind-dyndb-ldap-11.9-9.fc34
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
[SECURITY] Fedora 36 Update: bind-dyndb-ldap-11.9-14.fc36
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
