谷歌 Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. An out-of-bounds read vulnerability exists in IPC in versions prior to Google Chrome 89.0.4389.114. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2021-28134

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

Xander Frangos twinkle-tray 安全漏洞

Xander Frangos twinkle-tray is an open source application by Xander Frangos. It provides a function to manage the brightness level of multiple monitors. A security vulnerability exists in Xander Frangos twinkle-tray through 1.13.3, which can be exploited by an attacker to potentially send a craft...

IPCDump – Guardicore’s New Open-Source Tool for Linux IPC Inspection

IPCdump allows software based firewall developers, researchers, and linux users to explore the Inter-process-communication IPC channels...

CVE-2021-22300

There is an information leak vulnerability in eCNS280TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods...

CVE-2021-22300

There is an information leak vulnerability in eCNS280TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods...

CVE-2021-22300

There is an information leak vulnerability in eCNS280TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods...

CVE-2021-22300: Cleartext Storage of Sensitive Information

There is an information leak vulnerability in eCNS280TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods...

Huawei eCNS280 安全漏洞

Huawei eCNS280 is the core network equipment of Huawei's wireless broadband trunking system. In addition to providing the network functions of a traditional core network, it also virtualizes the functions of network elements and shares standardized hardware resources among multiple network elemen...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve a lack of checks on parameters in IPC messages, which allows attackers to compromise data integrity.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the lack of checks on parameters in IPC messages. Exploiting these vulnerabilities can allow a remote attacker to compromise data integrity...

PT-2021-14938

Name of the Vulnerable Software and Affected Versions: eCNS280 TD versions V100R005C00 and V100R005C10 Description: The issue is related to an information leak. A command lacks a timeout exit mechanism, and temporary files contain sensitive information. This allows attackers to obtain information...

NVIDIA Windows GPU Display Driver (January 2021)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA GPU Display Driver contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service o...

pacemaker: ACL restrictions bypass

An ACL bypass flaw was found in Pacemaker. This flaw allows an attacker with a local account on the cluster and in the haclient group to use IPC communication with various daemons to directly perform certain tasks that would be prevented if they had gone through configured ACLs. The highest threa...

UBUNTU-CVE-2020-25654

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration...

Samsung Update Code Issue Vulnerability

Samsung Update Samsung Update Manager is a special upgrade tool for Samsung computers launched by Samsung Samsung in South Korea. The software is mainly used for Samsung-related software, drivers and firmware installation and upgrade. A security vulnerability exists in Samsung Update versions...

CVE-2020-7811

Samsung Update 3.0.2.0 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication...

CVE-2020-7811

Samsung Update 3.0.2.0 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication...

Privilege escalation

Samsung Update 3.0.2.0 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication...

CVE-2020-7811

Samsung Update 3.0.2.0 ~ 3.0.32.0 is vulnerable to privilege escalation due to commands crafted by an attacker being executed while the engine deserializes data during inter-process communication. Description and connected sources consistently identify the affected component as Samsung Update, wi...

CVE-2020-7811 Samsung Update Local Privilege Escalation Vulnerability

Samsung Update 3.0.2.0 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication...