Google Android DevicePickerFragment.java elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation of privilege vulnerability exists in Google Android DevicePickerFragment.java. An attacker could exploit this vulnerability to escalate privileges...

Google Android Parcel.cpp information disclosure vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. Google Android Parcel.cpp is vulnerable to information disclosure. An attacker could use this vulnerability to obtain sensitive information...

Google Android StatsdStats.cpp elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. An attacker could exploit this vulnerability to escalate privileges...

Fortinet FortiSandbox SQL注入漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet, Inc. Fortinet FortiSandbox is vulnerable to SQL injection, a vulnerability that results from the product's failure to filter special characters in input data, which could be exploited to execute illegal...

Google Android libl3oemcrypto.cpp information disclosure vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android libl3oemcrypto.cpp is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information...

Google Android wifi driver information disclosure vulnerability (CNVD-2021-63792)

Google Android is a Linux-based open source operating system from Google, Inc. The Google Android wifi driver is vulnerable to information disclosure, which can be exploited by remote attackers to obtain sensitive information...

Google Android wifi driver information disclosure vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A remote attacker can exploit this vulnerability to obtain sensitive information...

Emerson GE Automation Proficy Machine Input Validation Error Vulnerability

Emerson GE Automation Proficy Machine Edition is an application of emerson Inc. an automation solution. An automation solution, an input validation error vulnerability exists in Emerson GE Automation Proficy Machine due to incorrect input validation in Emerson GE Automation Proficy Machine Editio...

Emerson GE Automation Proficy Machine Buffer Overflow Vulnerability

Emerson GE Automation Proficy Machine Edition is an application from emerson, Inc. An automation solution. A buffer error vulnerability exists in Emerson GE Automation Proficy Machine that originates from a buffer overflow in Emerson GE Automation Proficy Machine Edition v8.0. The vulnerability c...

Solarwinds Orion Platform has an unspecified vulnerability

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc....

Apple macOS Big Sur Buffer Overflow Vulnerability (CNVD-2021-102841)

Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer error that could be exploited by attackers to run specially crafted programs that trigger out-of-bounds writes and cause the system to unexpectedly terminate or write to kernel memory...

Code injection

dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP query used to check for updates...

CVE-2021-30110

CVE-2021-30110 refers to dttray.exe in Greyware Automation Products Inc Domain Time II prior to 5.2.b.20210331, which can allow remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed UDP response used to check for updates. The description indicates the vulnerabili...

CentOS 8 : kernel (CESA-2021:2714)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2714 advisory. - kernel: race condition for removal of the HCI controller CVE-2021-32399 - kernel: sizet-to-int conversion vulnerability in the filesystem layer...

Dell EMC PowerStore OS Command Injection Vulnerability

Dell EMC PowerStore is a storage device from Dell Dell, Inc. Dell EMC PowerStore versions prior to 1.0.3.0.5.006 have an operating system command injection vulnerability that can be exploited by a locally authenticated attacker to execute arbitrary OS commands on the underlying PowerStore operati...

Google Chrome Installer security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome sensor handling code execution vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in sensor handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome DevTools Code Execution Vulnerability (CNVD-2021-55926)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome DevTools. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Android intents security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Android intent in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...

Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability

Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...