12272 matches found
Sonatype Nexus Repository Manager 信息泄露漏洞
Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. An information disclosure vulnerability exists in Sonatype Nexus Repository Manager, which can be exploited by an attacker to bypass acces...
Code injection
Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL...
Delta Electronics DiaLink 代码问题漏洞
DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...
CVE-2021-42011: Incorrect Default Permissions
An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...
Directory traversal
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
CVE-2021-41150
Tough provides a set of Rust libraries and tools for using and generating the update framework TUF repositories. The tough library, prior to 0.12.0, does not properly sanitize delegated role names when caching a repository, or when loading a repository from the filesystem. When the repository is...
pocsuit3
Based on the provided code and metadata, here is a compact paragraph of 5-7 sentences summarizing the repository: This repository is an open-sourced remote vulnerability testing and proof-of-concept development framework called pocsuite3, developed by the Knownsec 404 Team. It comes with a powerf...
PT-2021-23469
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description The issue is related to an incorrect permission assignment, which could allow a local attacker to load a DLL wit...
tough library 路径遍历漏洞
tough library is a tool for using and generating TUF repositories. A security vulnerability exists in versions prior to Tough library 0.12.0 that stems from the program's inability to properly clean up delegated role names when caching a repository or loading a repository from the file system...
Trend Micro Apex One 代码问题漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a code issue vulnerability that stems from the application allowing the inclusion of libraries from the...
Trend Micro Apex One 代码问题漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a code issue vulnerability that stems from the application allowing the inclusion of libraries from the...
The vulnerability of Honeywell’s industrial portable computer operating system lies in the lack of restrictions on file loading, allowing a hacker to execute any code on the server.
The vulnerability of Honeywell’s industrial portable computer operating system lies in the lack of restrictions on file loading. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the server...
Integer Overflow or Wraparound in OpenCV
In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects OpenCV 3.3 corresponding with OpenCV-Python version 3.3.0.9 and...
Prototype Pollution in config-handler
All versions of package config-handler are vulnerable to Prototype Pollution when loading config files...
Zoom Client < 5.0.4 Privilege Escalation Vulnerability (ZSB-20002) - Windows
Zoom Client is prone to a privilege escalation vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
CVE-2021-23448
All versions of package config-handler are vulnerable to Prototype Pollution when loading config files...
CVE-2021-23448
All versions of package config-handler are vulnerable to Prototype Pollution when loading config files...
CVE-2021-23448
All versions of package config-handler are vulnerable to Prototype Pollution when loading config files...
PT-2021-16765 · Unknown · Kubernetes Java Client Libraries
Name of the Vulnerable Software and Affected Versions: Kubernetes Java Client library affected versions not specified Description: Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. Recommendations: At the moment, there is no information about a new...
