876 matches found
Intel FCS Server 安全漏洞
Intel FCS Server Software is a programmable gate array cryptographic service software from Intel Corporation USA. A security vulnerability exists in Intel FCS Server versions prior to 1.1.79.3. An attacker could exploit this vulnerability to cause a denial of service on the system...
SUSE CVE-2007-3379
Unspecified vulnerability in the kernel in Red Hat Enterprise Linux RHEL 4 on the x8664 platform allows local users to cause a denial of service OOPS via unspecified vectors related to the getgatevma function and the fuser command...
SUSE CVE-2020-25221
getgatepage in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting caused by gate page mishandling of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit...
@cromwell/cms (>=3.0.0-alpha.0, <=3.0.5), @cromwell/server (>=3.0.0-alpha.0, <=3.0.5) +4 more potentially affected by CVE-2023-25576 via @fastify/multipart (>=7.1.0, <=7.4.0)
@fastify/multipart NPM version =7.1.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.1.1, =2.42.0, =1.14.0, =0.50.5-test.0, =4.51.0-test.0 Source cves: CVE-2023-25576 Source advisory: OSV:GHSA-HPP2-2CR5-PF6G...
PT-2023-34201 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a memory leak in the socfpga gate init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
gatecitybutcher.com Cross Site Scripting vulnerability OBB-3151449
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
rotterdamgategames.nl Cross Site Scripting vulnerability OBB-3143963
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the HTTP server software of Moxa MGate MB3180, MB3280, and MB3480 allows attackers to gain unauthorized access to protected information or enhance their privileges.
The vulnerability of the HTTP server software for Moxa MGate MB3180, MB3280, and MB3480 relates to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or enhance their privileges...
CVE-2022-36782
CVE-2022-36782 involves an authorization flaw in PalGate’s Android device-management client. The vulnerability allows an attacker to enumerate IoT devices, view all entries/exits across gates worldwide, and extract a user database (over 2.8 million users) including names, phone numbers, and movem...
CVE-2022-36782
Pal Electronics Systems - Pal Gate Authorization Errors. The vulnerability is an authorization problem in PalGate device management android client app. Gates of bulidings and parking lots with a simple button in any smartphone. The API was found after a decompiling and static research using Jadx,...
CVE-2022-38161
The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA...
CVE-2022-21551
Vulnerability in Oracle GoldenGate component: Oracle GoldenGate. The supported version that is affected is 21c: prior to 21.7.0.0.0; 19c: prior to 19.1.0.0.220719. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate...
CVE-2022-21551
Vulnerability in Oracle GoldenGate component: Oracle GoldenGate. The supported version that is affected is 21c: prior to 21.7.0.0.0; 19c: prior to 19.1.0.0.220719. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate...
All Hands-on Deck: A Whole-of-Society Approach for Cybersecurity
The morning of June 9th, I was driving over the Golden Gate Bridge into San Francisco with my family. While crossing the bridge my children shared some facts about this modern engineering marvel. Each day, approx. 100,000 vehicles travel over the bridge deck, which weighs a staggering 150,000 ton...
All Hands-on Deck: A Whole-of-Society Approach for Cybersecurity
The morning of June 9th, I was driving over the Golden Gate Bridge into San Francisco with my family. While crossing the bridge my children shared some facts about this modern engineering marvel. Each day, approx. 100,000 vehicles travel over the bridge deck, which weighs a staggering 150,000 ton...
The vulnerability of the OGG Core Library, a data stream management tool from Oracle GoldenGate, allows a hacker to gain full control over the application.
The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
Malicious code in mailru-auth-gate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4931b2764b279ed60d329913f78b0aa1f1b8b9c9536131bd23cc5abdb3a88ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4458 Malicious code in mailru-auth-gate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4931b2764b279ed60d329913f78b0aa1f1b8b9c9536131bd23cc5abdb3a88ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Age Gate plugin跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WordPress Age Gate plugin 2.1.70 and earlier versions are vulnerable to a cross-site scripting vulnerability...