Mozilla Firefox Type Obfuscation Vulnerability (CNVD-2021-90101)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a type obfuscation vulnerability that stems from a faulty JIT optimization and a type obfuscation error. A remote attacker could trick a victim into opening a carefully construct...

PT-2021-3918 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Print Spooler. It allows a remote attacker to execute arbitrary code by sending a specially crafted...

PT-2021-5260 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS Server component of the Microsoft Windows operating system. It allows remote attackers to execute arbitrar...

The vulnerability of the software for creating a private virtual network, astra-openvpn-server, relates to the bypass of authentication due to a fundamental error. This allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software used to create the private virtual network astra-openvpn-serve is related to the improper creation of certificates, which are generated without authentication parameters. Exploiting this vulnerability allows a malicious actor to gain access to confidential data,...

The vulnerabilities of operating systems such as iOS, iPadOS, macOS, tvOS, the browser Safari, the multimedia player iTunes, and the iCloud service allow attackers to compromise the integrity of protected information.

The vulnerabilities of operating systems such as iOS, iPadOS, macOS, tvOS, the browser Safari, the multimedia player iTunes, and the iCloud service are related to incorrect processing of logical operations. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of...

Intel Processors 处理逻辑错误漏洞

Intel Processors are provided by Intel Corporation USA to interpret computer instructions and process data in computer software. A Processing Logic Error vulnerability exists in Intel Processors, which arises from improper firmware initialization that could allow a privileged user to enable a...

SUSE: Security Advisory (SUSE-SU-2018:3961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

F5 BIG-IP Edge Gateway Elevation of Privilege Vulnerability

F5 BIG-IP Edge Gateway is a remote access solution from F5 USA. An elevation of privilege vulnerability exists in F5 BIG-IP Edge Gateway, which stems from a faulty program call to an advanced native procedure, where a non-privileged user uses a malicious DLL to elevate power on a client Windows...

F5 BIG-IP Edge Gateway代码问题漏洞

F5 BIG-IP Edge Gateway is a remote access solution from F5 USA. An elevation of privilege vulnerability exists in F5 BIG-IP Edge Gateway, which stems from a faulty program call to an advanced native procedure, where a non-privileged user uses a malicious DLL to elevate power on a client Windows...

CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service...

CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service...

ISC DHCP 缓冲区错误漏洞

ISC DHCP is a suite of open source Dynamic Host Configuration Protocol server software from ISC Corporation. ISC DHCP suffers from a buffer error vulnerability that stems from a program that may cause dhclient to crash when reading an incorrect lease, which could lead to network connectivity issu...

IBM InfoSphere Information Server 授权问题漏洞

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. An information disclosure vulnerability exists in IBM...

Security update for nim (moderate)

openSUSE Security Update: Security update for nim Announcement ID: openSUSE-SU-2021:0618-1 Rating: moderate References: 1185083 1185084 1185085 Cross-References: CVE-2021-21372 CVE-2021-21373 CVE-2021-21374 CVSS scores: CVE-2021-21374 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affecte...

The vulnerability of the Remote Procedure Call component in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Procedure Call component in the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-2718 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code on the system...

PT-2021-2742 · Microsoft · Windows Media Video Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Video Decoder affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Media Video Decoder component of Microsoft Windows operating systems. It allows remote...

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A path traversal vulnerability exists in versions prior to SMR APR-2021 Release 1, which stems from faulty access control and can be exploited by an attacker to read or write...

PT-2021-2291 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

CVE-2021-27378

An issue was discovered in the randcore crate before 0.6.2 for Rust. Because readu32into and readu64into mishandle certain buffer-length checks, a random number generator may be seeded with too little data...