Python Input Validation Error Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An input validation error vulnerability exists in Python. The vulnerability originates from a networked...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07306)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2020-09965)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

openslp security update

CentOS Errata and Security Advisory CESA-2020:0199 An update for openslp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

QEMU Path Traversal Vulnerability

QEMU Quick Emulator is a suite of analog processor software. A path traversal vulnerability exists in QEMU. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An attacker could use this vulnerability to acce...

FontForge Resource Management Error Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A resource management error vulnerability exists in the 'SFDGetFontMetaData' function of the sfd.c file in FontForge version 20190801. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

GPAC Resource Management Error Vulnerability (CNVD-2020-00527)

GPAC is an open source multimedia framework. A resource management error vulnerability exists in the 'trakRead' function of the isomedia/boxcodebase.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from a mismanagement of system resources e.g., memory, disk...

Multiple Apple Products CoreAudio Component Out-of-Bounds Read Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. coreAudio is a core audio component. An out-of-bounds read vulnerability exists in the CoreAudio componen...

virglrenderer code issue vulnerability

virglrenderer is a VirGL virtual OpenGL renderer. A code issue vulnerability exists in the vrendrenderer.c file in virglrenderer 0.8.0 and earlier versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed...

ImageMagick Studio ImageMagick Resource Management Error Vulnerability (CNVD-2020-00279)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio ImageMagick suffers from a resource management error vulnerability. The...

ImageMagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2020-00276)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio ImageMagick suffers from a buffer overflow vulnerability. The vulnerability...

Malwarebytes AdwCleaner Code Issue Vulnerability

Malwarebytes AdwCleaner is a utility program from the American company Malwarebytes. The program is mainly used to scan and remove pre-installed software such as advertisements from Windows computers. A code issue vulnerability exists in versions of Malwarebytes AdwCleaner prior to 8.0.1. The...

WAGO PFC200 Information Disclosure Vulnerability

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. An information disclosure vulnerability exists in the WAGO PFC200. The vulnerability arises from errors such as configuration during operation of a networked system or product. An attacker could exploit this vulnerability t...

Xfig fig2dev buffer overflow vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Xfig fig2dev. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and writ...

libsixel Input Validation Error Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. An input validation error vulnerability exists in the 'sixelencodebody' function of the tosixel.c file in libsixel version 1.8.2. The vulnerability stems from a networked...

Dell Command Configure Code Issue Vulnerability

Dell Command Configure is a Dell USA application that provides configuration capabilities for business client platforms. The program contains both a command line interface and a graphical user interface for configuring a variety of BIOS features. A code issue vulnerability exists in Dell Command...

Anviz CrossChex access control management software buffer overflow vulnerability

Anviz CrossChex access control management software is an intelligent management system for Anviz access control and time & attendance devices from Anviz China. A buffer overflow vulnerability exists in the Anviz CrossChex access control management software. The vulnerability arises when a network...

gs-gpl competitive conditions issue vulnerability

gs-gpl is a Ghostscript PostScript interpreter. A competing condition issue vulnerability exists in gs-gpl versions prior to 8.56, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during operation of a networked...

xlockmore Access Control Error Vulnerability

xlockmore is a screen saver for the X Window system. An Access Control Error vulnerability exists in xlockmore versions 5.13 and 5.22, which arises from a networked system or product that does not properly restrict access to resources from unauthorized roles and can be exploited by an attacker to...

Linux kernel buffer overflow vulnerability (CNVD-2019-46998)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product performing operations in memory without properl...