Mcafee McAfee Drive Encryption 代码问题漏洞

Mcafee McAfee Drive Encryption is a full-disk encryption software from Mcafee that helps protect data on Microsoft Windows tablets, laptops, and desktop PCs from sensitive data loss, especially from lost or stolen devices. mcafee Drive Encryption MDE version 7.3.0 HF2 7.3.0.183 prior to this...

PT-2021-19550 · Mcafee · Mcafee Drive Encryption

Name of the Vulnerable Software and Affected Versions: McAfee Drive Encryption MDE versions prior to 7.3.0 HF2 7.3.0.183 Description: The issue allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder. This is due to a DLL Search Order Hijacking...

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22931 DESCRIPTION: Node.js could provide weaker than expected security, caused by missing input validation on hostnames...

CVE-2021-43192

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

CVE-2021-43190

In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...

CVE-2021-43192

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

CVE-2021-43190

In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...

Code injection

In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...

CVE-2021-43190

In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...

CVE-2021-43192

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

Code injection

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

CVE-2021-43190

JetBrains YouTrack Mobile before 2021.2 is affected by a task hijacking vulnerability on Android. The CVE-2021-43190 issue impacts integrity (I:L) with no confidentiality/availability impact, CVSS 3.1 base 5.3. Exploitation appears possible over network with no user interaction. The JetBrains Q3 ...

CVE-2021-43190

In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...

CVE-2021-43192

CVE-2021-43192 describes an iOS URL scheme hijacking vulnerability in JetBrains YouTrack Mobile prior to version 2021.2. The provided documents consistently state: “In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.” The JetBrains security bulletin entry for YouTrac...

CVE-2021-43192

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...

Koppeling - Adaptive DLL Hijacking / Dynamic Export Forwarding

This project is a demonstration of advanced DLL hijack techniques. It was released in conjunction with the "Adaptive DLL Hijacking" blog post. I recommend you start there to contextualize this code. This project is comprised of the following elements: Harness.exe: The "victim" application which i...

PT-2021-16903 · Unknown · Apostrophe Cms

Name of the Vulnerable Software and Affected Versions: Apostrophe CMS versions prior to 3.3.1 Description: The issue allows unauthenticated remote attackers to hijack recently logged-in users' sessions due to insufficient session expiration. This can occur when a device is compromised by a third...

Amazon Linux AMI : c-ares (ALAS-2021-1545)

The version of c-ares installed on the remote host is prior to 1.17.2-1.8. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1545 advisory. A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...