13278 matches found
Design/Logic Flaw
There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset...
CVE-2021-22414
There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset...
CVE-2021-22414
CVE-2021-22414 pertains to a memory buffer/stack overflow vulnerability in Huawei smartphones, described across multiple sources (Huawei EMUI/Magic UI stack). The vulnerability can lead to a system reset on successful exploitation. Publicly available details in connected documents are limited to ...
PT-2021-15037
Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to Memory Buffer Errors, which can cause the system to reset upon successful exploitation. Recommendations: At the moment, there is no information about a new...
IBM Cloud Pak for Security ๅฎๅ จๆผๆด
IBM Cloud Pak for Security is an application from IBM USA, Inc. an open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated actions faster.IBM Cloud Pak for Security CP4S is vulnerable to an information disclosure vulnerabili...
Zope ๆณจๅ ฅๆผๆด
Zope is a set of open source object-oriented web application servers written in the Python language by the Zope community. An injection vulnerability exists in Zope AccessControl. The vulnerability stems from a lack of proper validation of user input data by a web system or product during the...
The vulnerability of Google Chromeโs Safe Browsing service allows a hacker to bypass security restrictions.
The vulnerability of Google Chromeโs Safe Browsing service is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions through a specially created HTML page...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by synchronization errors when using a common resource. This allows an attacker to escape the isolated software environment.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by synchronization errors when using a common resource. Exploiting these vulnerabilities can allow an attacker to escape from a isolated software environment...
The vulnerability of the cryptographic module of microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.
The vulnerability of the cryptographic module of microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to errors in encryption and decryption processes. Exploiting this vulnerability can allow a malicious actor to cause service...
Mozilla Firefox Security Advisories (MFSA2021-28, MFSA2021-30) - Mac OS X
This host is missing a security update according to Mozilla. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla Firefox Security Advisories (MFSA2021-28, MFSA2021-30) - Windows
This host is missing a security update according to Mozilla. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
The vulnerability of the ColdFusion software platform, related to errors in the use of standard permissions, allows attackers to increase their privileges.
The vulnerability of the ColdFusion software platform is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...
Business Logic Errors in pimcore/pimcore
โ๏ธ Description Pimcore is vulnerable to Business Logic error through negative products amount. ๐ต๏ธโโ๏ธ Proof of Concept HTML content: HTML 1. Save the above content into an HTML file. 2. Open the HTML file on the browser and click on Submit button. 3. Check out the total price. PoC video. ๐ฅ Impact It...
PT-2021-7430
Name of the Vulnerable Software and Affected Versions Mozilla VPN versions prior to 2.3 Description The issue is related to security configuration errors in Mozilla VPN, which can be exploited by a remote attacker to bypass security restrictions. Multiple low-security issues were discovered and...
CVE-2021-29767
IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681...
IBM i2 Analyze ๅฎๅ จๆผๆด
IBM i2 Analyze is an integrated set of security services and stores from IBM USA that provides authorized users with the ability to search, analyze, and store intelligence data. IBM i2 Analyze is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtai...
Cisco Adaptive Security Appliance Software Release 7.0.0 IPsec DoS (cisco-sa-asa-ftd-ipsec-dos-TFKQbgWC)
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...
PT-2021-3742 ยท Microsoft ยท Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in creating connections with directories in the Edge Installer component of Microsoft Edge, allowing an attacker to potentially elevate privileges and...
CVE-2021-1102
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can lead to floating point exceptions, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11.5 and version 8.x prior 8.8...
Business Logic Errors in microweber/microweber
โ๏ธ Description microweber is vulnerable to Business Logic error through negative product price. ๐ต๏ธโโ๏ธ Proof of Concept HTML content: HTML 1. Save the above content into an HTML file. 2. Access the app localhost and add a product to the cart. 3. Open the HTML file and click on submit button to take...