55263 matches found
Apache StreamPark 安全漏洞
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark has a security vulnerability that can be exploited by attackers to cause confidentiality, integrity and availability to be compromised...
The vulnerability of the io_futex_wait() function in the io_uring/futex.c module, a component of the Linux kernel’s asynchronous input/output interface, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iofutexwait function in the iouring/futex.c module, a component of the Linux kernel’s asynchronous input/output interface, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
PT-2025-41535
Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software contains a flaw related to the inclusion of functionality from an untrusted control sphere. Specifically, the application allows loading third-party scripts without proper integrity checks or...
Future G Network'S New Reality: Opportunities and Security Challenges
Future G network's new reality is a widespread cyber-physical environment created by Integrated Sensing and Communication ISAC. It is a crucial technology that transforms wireless connections into ubiquitous sensors. ISAC unlocks transformative new capabilities, powering autonomous systems,...
The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...
The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the downloadFile.cgi file in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromis...
The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
D-Link Nuclias Connect 安全漏洞
D-Link Nuclias Connect is a network management software from D-Link for centralized management of wireless access points APs, supporting multi-device remote control and reporting capabilities. A directory traversal vulnerability exists in D-Link Nuclias Connect, which stems from improper cleanup ...
The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...
ChurchCRM 安全漏洞
ChurchCRM is ChurchCRM open source an open source CRM system for churches. ChurchCRM 5.18.0 and earlier versions have an authentication error vulnerability that stems from a lack of authentication in the AuthMiddleware function in the API Endpoint component, which can be exploited by an attacker ...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to deficiencies in access control. This allows attackers to compromise the integrity of the protected information.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
A2AS: Agentic AI Runtime Security and Self-Defense
The A2AS framework is introduced as a security layer for AI agents and LLM-powered applications, similar to how HTTPS secures HTTP. A2AS enforces certified behavior, activates model self-defense, and ensures context window integrity. It defines security boundaries, authenticates prompts, applies...
The vulnerability of open-source development environments for UEFI EDK2 lies in the violation of data protection mechanisms, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of open-source development environments for UEFI EDK2 is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
ROS-20251008-01
The Thunderbird email client vulnerability, Thunderbird ESR is related to insufficient authentication of the data. Exploitation of the vulnerability could allow an attacker acting remotely to affect the data integrity Vulnerability of Address Book URI fields of Thunderbird, Thunderbird ESR mail...
FreeBSD : Mozilla -- mitigation bypass vulnerability (a240c31b-a394-11f0-9617-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a240c31b-a394-11f0-9617-b42e991fc52e advisory. [email protected] reports: The vulnerability has been rated as having moderate impact, affecting bot...
Linux Distros Unpatched Vulnerability : CVE-2023-53604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails. CVE-2023-53604 Note that...
CVE-2023-6215 HP Sure Start IFD Protection - BIOS Security Update
A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to...
EUVD-2021-2467
Malware in sbrugna...