Advanced Micro Devices SNP 输入验证错误漏洞

Advanced Micro Devices SNP AMD SNP is a firmware from AMD Advanced Micro Devices, Inc.. The Advanced Micro Devices SNP suffers from an input validation error vulnerability that arises from a networked system or product that does not properly validate incoming data...

Advanced Micro Devices SNP 输入验证错误漏洞

Advanced Micro Devices SNP AMD SNP is a firmware from AMD Advanced Micro Devices, Inc.. The Advanced Micro Devices SNP Firmware suffers from an input validation error vulnerability that arises from a networked system or product that does not properly validate incoming data...

Zydis has an unspecified vulnerability

Zydis is an open source x86/x86-64 disassembly library from the Zyantific team.A security vulnerability exists in Zydis, which stems from an improper design or implementation during the development of code for a networked system or product. No detailed vulnerability details are currently availabl...

Thymeleaf-Spring5 代码注入漏洞

Thymeleaf-Spring5 is an open source, modern, server-side Java template engine for web and standalone environments from the Thymeleaf team. A security vulnerability exists in Thymeleaf-Spring5, which arises from a networked system or product that does not properly filter specific elements of...

Miniftpd Buffer Overflow Vulnerability (CNVD-2021-103090)

Miniftpd is a simplified version of the open source vsftp server for Linux that implements some of the features of vsftp. Miniftpd suffers from a buffer overflow vulnerability, which stems from a networked system or product that does not properly validate data boundaries when performing operation...

VISAM VBASE 代码问题漏洞

Visam VISAM VBASE is a data acquisition and monitoring system from Visam, Germany. VISAM VBASE has a code issue vulnerability that arises from improper design or implementation during code development of a networked system or product...

HCL Software HCL Domino 安全漏洞

HCL Software HCL Domino is an application software from India HCL Software. It provides a platform for application development. HCL Software HCL Domino has a security vulnerability that arises from a lack of security measures such as authentication, access control, and privilege management in a...

Publify 授权问题漏洞

Publify is a simple but full-featured web publishing software. Publify suffers from a security vulnerability that stems from a lack of effective permissions licensing and access control measures on a networked system or product...

Mycodo path traversal vulnerability

Mycodo is an environment monitoring and conditioning system. Used to couple inputs and outputs to sense and manipulate the environment, Mycodo is vulnerable to a path traversal vulnerability in versions prior to 8.12.7, which stems from a networked system or product failing to properly filter...

Nextcloud has an unspecified vulnerability (CNVD-2022-18417)

Nextcloud is an open source, self-hosted file synchronization and sharing communications application platform from Nextcloud, a German company. nextcloud has a security vulnerability that stems from an improper design or implementation during the development of code for a networked system or...

NVIDIA Windows GPU Display Driver 代码问题漏洞

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver for the Windows platform from Nvidia, Inc. The NVIDIA Windows GPU Display Driver is vulnerable to a code issue that arises from improper management of system resources e.g., memory, disk space, files, etc. b...

NVIDIA Windows GPU Display Driver 代码问题漏洞

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver for the Windows platform from Nvidia, Inc. The NVIDIA Windows GPU Display Driver is vulnerable to a code issue that arises from improper management of system resources e.g., memory, disk space, files, etc. b...

High school student rickrolls entire school district, and gets praised

A student at a high school in Cook County successfully hacked into the Internet-of-Things IoT devices of one of the largest school districts in Illinois, and gave everyone a surprise. Minh aka @WhiteHoodHacker on Twitter who attends Elk Grove—a name that curiously resembles the home town of...

Modern-Async 资源管理错误漏洞

Modern-Async is a modern JavaScript tool library for asynchronous operations using Async/Await and Promise. A resource management error vulnerability exists in modern-async that arises from improper design or implementation during code development for a networked system or product...

FreeBSD 竞争条件问题漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD suffers from a Competing Conditions Problem vulnerability that arises from improper handling of concurrent accesses during operation of a networked system or product where concurrent code requires mutually...

udisks 输入验证错误漏洞

Udisks is a daemon for querying and managing storage devices. An input validation error vulnerability exists in Udisks, which arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product...

Zephyr Buffer Overflow Vulnerability (CNVD-2021-83788)

Zephyr is an open source, small, scalable, real-time operating system from the Linux Foundation in the U.S. A security vulnerability exists in Zephyr, which stems from improper design or implementation during the development of code for a networked system or product. No details of the vulnerabili...

Zephyr 缓冲区错误漏洞

Zephyr is an open source, small, scalable, real-time operating system from the Linux Foundation in the U.S. A security vulnerability exists in Zephyr, which stems from improper design or implementation during the development of code for a networked system or product. No details of the vulnerabili...

gpac MP4Box安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but it can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and so on. A security vulnerability exists in GPAC MP4Box that originates when a networked syste...

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from an improperly designed or implemented code development process for a networked system or product...