Oracle Secure Global Desktop输入验证错误漏洞

Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise applications and hosted desktops running on Microsoft Windows, Linux, Oracle Solaris, and mainframe servers. A security vulnerability exists in the Client component in version 5.6. An attacker could...

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle. A denial of service vulnerability exists in the Server: DDL component of Oracle MySQL Server 8.0.25 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation USA. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL Server 8.0.25 and earlier. An attacker could exploit this vulnerability to affect confidentiality...

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation. A denial-of-service vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.25 and earlier versions. An attacker can exploit this vulnerability to cause MySQL Server to hang or...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Java VM component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An attacker...

LearningDigital Orca HCM digital learning platform 输入验证错误漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. An input validation error vulnerability exists in the Orca HCM digital learning platform, which stems from a specific feature of the platform that does not properly filter input...

Moodle 输入验证错误漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an input validation error vulnerability due to insufficient validation of user-supplied input when processing emai...

Hashicorp HashiCorp Consul 输入验证错误漏洞

Hashicorp HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp Hashicorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. HashiCorp Consul and Consul Enterprise suffers from an input...

Medialize URI.js 输入验证错误漏洞

Medialize URI.js is a Javascript-based code library from the Medialize team that can be used to efficiently stitch URLs. Medialize URI.js is vulnerable to an input validation error that results from a new URI that fails to properly parse https:///, which leads to the system user being directed to...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2021-51476)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has an input validation error vulnerability that could be exploited by an attacker to elevate his privileges to...

IBM Security Access Manager Privilege License and Access Control Issues Vulnerability (CNVD-2021-53344)

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

pip 输入验证错误漏洞

Pip is a set of tools for installing and managing Python packages. An input validation error vulnerability exists in python pip, which could be exploited by a remote attacker to install a different revision on the repository...

Fortinet FortiSandbox Command Injection Vulnerability

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiSandbox suffers from a command injection vulnerability that...

Huawei Manageone 输入验证错误漏洞

Huawei Manageone is a cloud data center management solution from Huawei of China. huawei ManageOne is vulnerable due to a lack of checksum when the program uses certain parameters from external files. An attacker could use the vulnerability to construct a malicious file to achieve elevation of...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has an input validation error vulnerability that could be exploited by an attacker to elevate his privileges to...

IBM Security Access Manager 输入验证错误漏洞

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

Exiv2 输入验证错误漏洞

Exiv2 is a set of C libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in multiple formats such as EXIF, IPTC, and XMP.A security vulnerability exists in Exiv2 version 0.27.1, which stems from an integer overflow in Exiv2'...

Microsoft Windows DNS 输入验证错误漏洞

Windows Server is the brand name of a series of server operating systems released by Microsoft, which includes all Windows operating systems released under the brand name "Windows Server". A denial of service vulnerability exists in Windows DNS Server in Microsoft Windows Server. No details of th...

Microsoft Windows Storage Services 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Storage Spaces Controller in...

Jsish 输入验证错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code...