Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper memory allocation and freeing, which could lead to a memory leak...

NanoMQ 资源管理错误漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open-sourced by EMQ USA. A resource management error vulnerability exists in NanoMQ versions prior to 0.24.2, which stems from a data contention issue with the subscription information list that could lead to a reuse crash after...

fluidsynth 资源管理错误漏洞

fluidsynth is a fluidsynth open source application. It is used to generate audio by reading and processing MIDI events from MIDI input devices using SoundFont. A resource management error vulnerability exists in fluidsynth versions prior to 2.5.2, which stems from a contention condition when...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from memory corruption when processing concurrent memory map and unmap requests, which could lead to a denial of service...

Avahi 资源管理错误漏洞

Avahi is the Avahi open source set of local service discovery tools for Linux. A resource management error vulnerability exists in Avahi 0.9-rc2 and earlier versions, which stems from unconditionally accepting connections without checking for client restrictions, and could lead to a local denial ...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc USA. A resource management error vulnerability exists in versions of Google Chrome prior to 143.0.7499.147, which stems from reuse of the WebGPU after release and can lead to heap corruption...

Flexense SyncBreeze 资源管理错误漏洞

Flexense SyncBreeze is a file synchronization and backup tool from Flexense. A resource management error vulnerability exists in Flexense SyncBreeze version 15.2.24, which stems from a denial-of-service vulnerability in the login authentication mechanism that could cause the service to crash...

Microsoft Outlook Resource Management Error Vulnerability

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A security vulnerability exists in Microsoft Outlook. An attacker could exploit the vulnerability to remotely execute code...

Servify Express 资源管理错误漏洞

Servify Express is an express parcel form server by the individual developer Aaron doran. A resource management error vulnerability exists in Servify Express versions prior to 1.2 that stems from the Express server not setting a JSON parsing size limit, which could lead to a denial of service...

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

Fortinet多款产品 加密问题漏洞

Fortinet FortiOS and others are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiAnalyzer is a centralized network security...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a post-release reuse vulnerability that stems from post-release reuse in the password manager. An attacker can exploit this vulnerability to perform a sandbox escape...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Windows Shell 资源管理错误漏洞

The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft Corporation USA.Easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. On some versions of...

Microsoft Windows DirectX 资源管理错误漏洞

Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows DirectX. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in Mozilla Firefox versions prior to 146, which stems from a post-release reuse issue in the Audio/Video GMP component that could lead to memory...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows Server...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Fortinet Fortigate Private key readable by admin (FG-IR-24-133)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-133 advisory. - A key management error vulnerability CWE-320 in FortiManager, FortiAnalyzer and FortiPortal may allow an authenticated admi...