Modern-Async 资源管理错误漏洞

Modern-Async is a modern JavaScript tool library for asynchronous operations using Async/Await and Promise. A resource management error vulnerability exists in modern-async that arises from improper design or implementation during code development for a networked system or product...

Google Chrome Sandbox Improper Implementation Vulnerability (CNVD-2021-84816)

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 94.0.4606.81 are vulnerable to improper sandbox implementation. An attacker could potentially bypass site quarantine via Windows by exploiting this vulnerability...

ZOHO ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks, such as bulk management of user accounts and A...

Improperly Implemented path matching for in-toto-golang

Impact Authenticated attackers posing as functionaries i.e., within a trusted set of users for a layout are able to create attestations that may bypass DISALLOW rules in the same layout. An attacker with access to trusted private keys, may issue an attestation that contains a disallowed artifact ...

http4s 注入漏洞

http4s is an open source streaming HTTP server for Scala. http4s suffers from an injection vulnerability that arises from improper design or implementation during code development of a network system or product...

Samsung Mobile Device 代码问题漏洞

Samsung Mobile Device is a series of mobile smart devices from Samsung, a South Korean company. A security vulnerability exists in Samsung Mobile Device, which arises from an improper design or implementation of a networked system or product code development process...

LINE for iOS 安全漏洞

Line for IOS is an instant messaging application based on the IOS platform. A security vulnerability exists in LINE for iOS that arises from improper design or implementation during code development of a networked system or product...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS has a security vulnerability that arises from improper design or implementation during code development of a network system or product...

The vulnerability of Google Chrome’s API, related to shortcomings in domain restriction mechanisms (Same Origin Policy), allows attackers to access confidential information.

The vulnerability of Google Chrome’s API is related to improper implementation. Exploiting this vulnerability can allow a remote attacker to access confidential information...

SUSE: Security Advisory (SUSE-SU-2019:1461-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-site Scripting (XSS) - Reflected in falconchristmas/fpp

✍️ Description Reflected XSS in changebranch.php where due to improper implementation of code an attacker is able to inject malicious tags 🕵️‍♂️ Proof of Concept $branch = escapeshellcmd$GET'branch'; $command = "sudo /opt/fpp/scripts/gitbranch " . $branch . " 2&1"; echo "Command: $command\n";...

CVE-2021-31902

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

Qognify Ocularis Code Issue Vulnerability

A code issue vulnerability exists in Qognify Ocularis that arises from improper design or implementation during code development for a network system or product...

Dell EMC PowerScale OneFS Backup/Restore Privileges Improperly Implemented Vulnerability

Dell EMC PowerScale OneFS is an API-powered file system. A backup/restore privilege improperly implemented vulnerability exists in Dell EMC PowerScale OneFS 8.1.0-9.1.0. An attacker with the BackupAdmin role could exploit this vulnerability to write data outside of the expected file system...

Monitorr Code Issue Vulnerability

A code issue vulnerability exists in Monitorr that arises from improper design or implementation during code development of a network system or product...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-801)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This...

EulerOS Virtualization 3.0.6.0 : sqlite (EulerOS-SA-2020-1764)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1486-1)

This update for the Linux Kernel 4.4.121-92129 fixes several issues. The following security issues were fixed : CVE-2020-12653: Fixed a buffer overflow in mwifiexcmdappendvsietlv which could have allowed local users to gain privileges or cause a denial of service bsc1171254. CVE-2020-12654: Fixed...

DEBIAN-CVE-2020-6447

Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-1864

CVE-2020-1864 affects Huawei Secospace AntiDDoS8000 series (V500R001C00, V500R001C20, V500R001C60, V500R005C00). Root cause is improper authentication implementation that allows a remote attacker to obtain information and forge the peer device to send specific packets, enabling connection to the ...