38664 matches found
Microsoft Windows Internet Information Services 输入验证错误漏洞
Microsoft Windows Internet Information Services IIS is a Web server from Microsoft Corporation for the Windows Server platform. An input validation error vulnerability exists in the Microsoft Windows Internet Information Services Cachuri Module, which can be exploited by an attacker to cause a...
The vulnerability of the Lightspeed-Plus operating system for Cisco IOS XR routers of the Cisco ASR 9000 family allows a attacker to trigger a service failure.
The vulnerability of the Lightspeed-Plus operating system for Cisco IOS XR routers of the Cisco ASR 9000 family relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted IPv4 or...
Internet Bug Bounty: Read beyond bounds in mod_isapi.c [zhbug_httpd_41]
Greetings. I have found a read-beyond-bounds bug in httpd that arises from an apparent logic error. The bug is in /modules/arch/win32/modisapi.c, on lines 979 and/or 983, which use the length of the path to the ISAPI DLL |strlenr-filename| to index into the string specified by the ISAPI DLL itsel...
Internet Bug Bounty: Apache HTTP Server: mod_proxy_ajp: Possible request smuggling
Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions...
kernel: buffer overflow in IPsec ESP transformation code
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site...
PT-2022-3524 · Exo +4 · Exo +4
Name of the Vulnerable Software and Affected Versions: XFCE version 4.16 Description: The issue allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. This is related to errors in security settings in the exo application libra...
The vulnerability of the CONFIG_IP_DEFRAG function in the implementation of the IP packet defragmentation algorithm in the U-Boot loader for embedded Linux-based operating systems allows a hacker to rewrite metadata and gain access to the operating system under the identity of a user.
The vulnerability of the CONFIGIPDEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux-based operating systems is related to errors in processing input data and the possibility of writing beyond the buffer boundaries. Exploiting...
CVE-2022-30738
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30738
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30738
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...
Input validation
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
Input validation
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...
CVE-2022-30740
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers...
CVE-2022-30740
CVE-2022-30740 describes an improper auto-fill algorithm in Samsung Internet o n Android prior to version 17.0.1.69 that can allow a physical attacker to guess stored credit card numbers. The vulnerability originates from how autofill data is managed, enabling local/physical access exploitation w...
CVE-2022-30738
Samsung Internet prior to 17.0.1.69 is affected by an improper check in the Loader, enabling attackers to spoof the address bar by executing script. Affected component: Samsung Internet’s Loader. Root cause: inadequate validation leading to UI spoof vulnerability. Impact: address bar spoofing, en...