CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872

CVE-2023-36872 refers to an information-disclosure flaw in the Microsoft Windows VP9 Video Extensions library. Public sources in the connected set describe the vulnerability as allowing an attacker to read small portions of heap memory when a user opens a specially crafted file, requiring user in...

VP9 Video Extensions Information Disclosure Vulnerability

...

PT-2023-3519 · Unknown · Vp9 Video Extensions

Name of the Vulnerable Software and Affected Versions: VP9 Video Extensions affected versions not specified Description: The issue is related to insufficient protection of internal data in the VP9 Video Extensions package. Exploitation of this issue may allow an attacker to gain unauthorized acce...

Microsoft Media-Wiki Extensions 安全漏洞

Microsoft Media-Wiki Extensions is an extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Media-Wiki Extensions. An attacker could exploit the vulnerability to remotely execute code...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person with access to the development environment can exploit the vulnerabilities to exploit attacks that could lead to the following categories of damage: Bypassing security measure. Remote code execution User rights...

New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security

Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called Quarantined Domains. "We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including securi...

golang: net/http, net/textproto: denial of service from excessive memory allocation

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service...

The vulnerabilities in the extensions for the development environment CODESYS SP Realtime NT, CODESYS Runtime Toolkit, and CODESYS PLCWinNT allow a attacker to cause service interruptions.

The vulnerability of the extensions for the development environment CODESYS SP Realtime NT, CODESYS Runtime Toolkit, and CODESYS PLCWinNT is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

GHSA-M9P2-J4HG-G373 Apache Cassandra: Privilege escalation when enabling FQL/Audit logs

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be...

Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled

...

PT-2023-4178 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to an inappropriate implementation in the Extensions component of Google Chrome, which could allow an attacker to inject scripts or HTML into a privileged page v...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

PT-2023-25897

Name of the Vulnerable Software and Affected Versions MISP version 2.4.172 Description The issue arises from MISP's mishandling of different certificate file extensions during server sync, leading to sensitive information disclosure through error messages. Recommendations For MISP version 2.4.172...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.172, which stems from the incorrect...

The vulnerability of the Google Chrome browser’s guest mode allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s guest mode is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service interruptions through a specially...

The vulnerability of the Google Chrome browser’s extension can compromise their integrity and also lead to service failures.

The vulnerability of the Google Chrome browser extension is related to the overflow of the heap buffer and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions throug...