FreeRDP 输入验证错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP Freerdp team. FreeRDP suffers from an input validation error vulnerability that stems from clipboard redirection being enabled by default. An attacker could read arbitrary files from a connected client...

OpenStack 输入验证错误漏洞

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace in the United States. Openstack Nova suffers from an input validation error vulnerability that allows remote attackers to exploit the vulnerability ...

Eclipse Mosquitto 输入验证错误漏洞

Eclipse Mosquitto is a set of open source messaging agent software from the Eclipse Foundation.An input validation error vulnerability exists in Eclipse Mosquitto 2.07 and earlier versions, which allows an attacker to crash the server by sending a PUBLISH packet with subject length = 0...

JustArchiNET ArchiSteamFarm 输入验证错误漏洞

ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. An input validation error vulnerability exists in JustArchiNET ArchiSteamFarm. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor...

tinyexr 输入验证错误漏洞

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

Exiv2 输入验证错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An integer overflow vulnerability exists in CrwMap::encode0x1810 in Exiv2 version 0.27.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

Huawei OxfordS-AN00A 输入验证错误漏洞

Huawei OxfordS-AN00A is a smartphone from Huawei China.The Huawei OxfordS-AN00A is vulnerable to an input validation error, which stems from a missing parameter checksum. An attacker could trick users into installing a malicious app, which could modify specific parameters and cause the system to...

mod_auth_openidc 输入验证错误漏洞

modauthopenidc is a software application. It is an authentication/authorization module for the Apache 2.x HTTP server that is used as an OpenID Connect dependency to authenticate users against the OpenID Connect provider. Previous versions of modauthopenidc were vulnerable to an input validation...

Facebook HHVM 输入验证错误漏洞

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of PHP loading dynamic pages. Facebook HHVM is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to perform out-of-bounds writes on the heap,...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient validation of user-provided input in the CoreAudio subsystem. A remote attacker could exploit the vulnerability to deliver...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to trigger an integer overflow and execute arbitrary code on the target system via a specially crafte...

Apple macOS Big Sur输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from insufficient validation of user-supplied input by the Model I/O subsystem. A remote attacker could exploit the vulnerability to trick a...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from Audio providing insufficient input validation to the user. The vulnerability allows a local user to execute arbitrary code with elevate...

Apple macOS 输入验证错误漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. An input validation error vulnerability exists in macOS due to insufficient validation of user-provided input in IOKit. A native application can execute arbitrary code using root...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient input validation provided to users in Crash Reporter. The vulnerability allows local users to elevate privileges...

Redis 输入验证错误漏洞

Redis is an open source ANSI C, network-enabled, memory-based, and persistent logging, Key-Value storage database with a multilingual API. The vulnerability can be exploited to attack 32-bit Redis programs running on 32-bit systems by combining the BIT command with the proto-max-bulk-len...

Oracle Hospitality Reporting and Analytics输入验证错误漏洞

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insight into business operations, and improves efficiency by delivering information to all roles within the organization. and Analytics version 9.1.0...

Oracle E-Business Suite 输入验证错误漏洞

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management.Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c contain a security vulnerability in the Oracle Database - Enterprise...

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle. A denial of service vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.25 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently...