Google Android Information Disclosure Vulnerability (CNVD-2022-53375)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause local information disclosure without additional execution privileges...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-52271)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a locking error in ipcheckmcrcu in igmp.c and can be exploited by attackers to cause a local privilege escalation...

Contec SolarView Compact Remote Code Execution Vulnerability

Contec SolarView Compact is an application from Contec Japan, Inc. Contec SolarView Compact v6.0 contains a remote code execution vulnerability that stems from a failure of SolarImage.php to properly filter special elements of the construction snippet. An attacker could exploit this vulnerability...

Idea IdeaLMS Cross-Site Scripting Vulnerability

IdeaLMS is an educational and learning management software from Idea. A cross-site scripting vulnerability exists in Idea IdeaLMS version 2022, which can be exploited by an attacker to execute JavaScript code on the client side...

Trendnet IP-110wn proname parameter cross-site scripting vulnerability

Trendnet IP-110wn is a wireless network camera from Trendnet. A cross-site scripting vulnerability exists in the Trendnet IP-110wn fwtv-ip110wnv2 1.2.2.68 version, which stems from a lack of checksum filtering of user-supplied and output data in the proname parameter in /admin/scheprofile.cgi. An...

CVE-2022-31734

Cisco Catalyst 2940 Series Switches are affected by a reflected cross-site scripting vulnerability in error page generation for firmware versions prior to 12.2(50)SY (2011). The issue could allow an attacker to cause arbitrary scripts to run in a user’s browser. Affected devices have been retired...

Adobe Bridge input validation error vulnerability

Adobe Bridge is a file viewer from Adobe, Inc. Adobe Bridge is vulnerable to an input validation error that could be exploited to execute arbitrary code in the context of the current user...

BitTorrent uTorrent 授权问题漏洞

BitTorrent uTorrent is a set of BitTorrent client software written in C++ by BitTorrent Inc. in the United States. A security vulnerability exists in BitTorrent uTorrent, which originates from a weak authentication vulnerability due to operation with unknown input, which can be exploited by...

Adobe Media Encoder Memory Corruption Vulnerability (CNVD-2022-50236)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A memory corruption vulnerability exists in Adobe Media Encoder version 15.4 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current...

New Qualys Research Report: Inside a Redline InfoStealer Campaign

The Qualys Threat Research Team continues its efforts to identify and document previously unseen adversary activity to better understand their tactics, techniques, and procedures TTPs and defend against them. Recently we identified a new Redline InfoStealer campaign that spreads via fake cracked...

chinafairinc.com Cross Site Scripting vulnerability OBB-2652441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Android Resource Management Error Vulnerability in Android (CNVD-2022-52279)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to resource management errors, which can be exploited by attackers to cause a local privilege escalation that requires system execution privileges...

Dell SupportAssist Client Cross-Site Scripting Vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive technologies for troubleshooting and more. A cross-site scripting vulnerability exists in Dell SupportAssist Client Consumer 3.10.4 and earlier and Dell SupportAssist Client...

Google Android Information Disclosure Vulnerability (CNVD-2022-53383)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an information disclosure vulnerability that originates in gallery3d and photos, which could bypass licensing due to agent confusion and could be exploited by attackers to cause local information...

Google Android out-of-bounds read vulnerability (CNVD-2022-53382)

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which stems from a possible out-of-bounds read in hid-lg.c and other USB HID files in lgprobe and related functions due to input validation errors. An...

Solutions Atlantic Regulatory Reporting System Cross-Site Scripting Vulnerability

Solutions Atlantic Regulatory Reporting System is a flagship regulatory reporting system from Solutions Atlantic, Inc. Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to a cross-site scripting vulnerability that could be exploited to execute JavaScript code...

npm Devcert Denial of Service Vulnerability

Devcert is a package for SSL development from npm, Inc. A denial of service vulnerability exists in versions prior to Devcert 1.2.1, which stems from triggering an exponential ReDoS regular expression denial of service in the Devcert package. An attacker could exploit this vulnerability to cause ...

Owl Labs Meeting Owl Licensing Issue Vulnerability (CNVD-2022-64972)

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring a series of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker, making meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to ...

Fedora: Security Advisory for cups (FEDORA-2022-09a89bc265)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Illumina Local Run Manager Information Disclosure Vulnerability

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains an information disclosure vulnerability that could be exploited by remote attackers to...