1097 matches found
OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability...
Gnuplot code issue vulnerability
Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...
json-smart: uncaught exception may lead to crash or information disclosure
A flaw was found in json-smart. When an exception is thrown from a function, but is not caught, the program using the library may crash or expose sensitive information. The highest threat from this vulnerability is to data confidentiality and system availability. In OpenShift Container Platform...
MGASA-2021-0542 Updated java openjdk packages fix security vulnerability
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: OpenJDK: Loop in HttpsServer triggered during TLS session close JSSE, 8254967 CVE-2021-35565 OpenJDK: Incorrect principal selection when using Kerberos...
json-smart: uncaught exception may lead to crash or information disclosure
A flaw was found in json-smart. When an exception is thrown from a function, but is not caught, the program using the library may crash or expose sensitive information. The highest threat from this vulnerability is to data confidentiality and system availability. In OpenShift Container Platform...
json-smart: uncaught exception may lead to crash or information disclosure
A flaw was found in json-smart. When an exception is thrown from a function, but is not caught, the program using the library may crash or expose sensitive information. The highest threat from this vulnerability is to data confidentiality and system availability. In OpenShift Container Platform...
The vulnerability of software for implementing VNC and TigerVNC lies in authentication process errors, which allow attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the software for implementing VNC TigerVNC is related to improper handling of TLS certificate exceptions. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...
CVE-2021-22474
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions...
CVE-2021-22474
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions...
CVE-2021-22474
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions...
CVE-2021-36994
There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist...
CVE-2021-22474
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions...
RHEL 7 : java-1.8.0-openjdk (RHSA-2021:3889)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3889 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...
CamaleonCMS 安全漏洞
CamaleonCMS is a RubyonRails-based advanced dynamic content management system CMS from the Camaleon CMS team.A denial-of-service vulnerability exists in Camaleon CMS versions 2.0.1 through 2.6.0, which stems from a vulnerability to uncaught exceptions in Camaleon CMS. An attacker with low privile...
python3 bug fix and enhancement update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. This package...
Exceptions may have logged Encryption-at-Rest key content
None...
CVE-2021-35465
CVE-2021-35465 affects multiple Arm Cortex-M microcontrollers (Cortex-M33 r0p0–r1p0, Cortex-M35P r0, Cortex-M55 r0p0–r1p0) and Arm China STAR-MC1 (STAR SE). The issue stems from improper handling of exceptions on VLLDM instructions, allowing a Non-secure handler to read or write to parts of a Sec...
json-smart: uncaught exception may lead to crash or information disclosure
A flaw was found in json-smart. When an exception is thrown from a function, but is not caught, the program using the library may crash or expose sensitive information. The highest threat from this vulnerability is to data confidentiality and system availability. In OpenShift Container Platform...
Intel Ethernet Adapters 800 处理逻辑错误漏洞
Intel Ethernet Adapters 800 is an Ethernet Adapter from Intel Corporation. A Processing Logic Error vulnerability exists in the Intel Ethernet Adapters 800 family of devices, which can be exploited by an attacker to cause a denial of service because the product does not properly catch certain...