PT-2022-11095

Name of the Vulnerable Software and Affected Versions Changlian Blocklist affected versions not specified Description The issue is related to Business Logic Errors, which may increase the attack surface of the message class upon successful exploitation. Recommendations At the moment, there is no...

GDAL 缓冲区错误漏洞

GDAL is an open source geospatial data abstraction library. A buffer error vulnerability exists in GDAL that stems from the product's PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment functions failing to correctly determine memory boundaries when calling...

PT-2025-8565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue exists around sysctl icmp errors use inbound ifaddr. The value of sysctl icmp errors use inbound ifaddr can be changed concurrently while it is being read, which requir...

Huawei HarmonyOS Exception Logging Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS, which stems from configuration and other errors in the network system or product during operation. An...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

mruby null pointer dereference vulnerability

mruby is a lightweight implementation of the Ruby language. A null pointer dereference vulnerability exists in mruby, which can be exploited by an attacker to cause segmentation errors and application crashes...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01684)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01688)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

Unspecified vulnerability in livehelperchat

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...

Mozilla Rust has an unspecified vulnerability (CNVD-2022-03126)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. security vulnerabilities exist in versions of Rust tremor-script crate prior to 0.11.6, which can lead to resource management errors. No details of the vulnerability are currently available...

The vulnerability of the Google Chrome browser’s background loading function allows a hacker to bypass content security policies and gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s background loading function is related to privilege management errors. Exploiting this vulnerability could allow a remote attacker to bypass content security policies and gain unauthorized access to protected information...

The vulnerability of the Content Security Policy mechanism implemented in Google Chrome allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Content Security Policy mechanism implemented by Google Chrome is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to circumvent existing access control policies...

GPAC Code Issue Vulnerability (CNVD-2022-04962)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

Vim 资源管理错误漏洞

Vim is a UNIX-based editor. Vim is vulnerable to resource management errors, and no detailed vulnerability details are currently available...

GPAC null pointer dereference vulnerability (CNVD-2022-04961)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

ROS-2-1986

2.1986 Mozilla Thunderbird email client vulnerability CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...