CVE-2022-48554

File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: "File" is the name of an Open Source project...

编号撤回

OpenJDK is an open source version of the OpenJDK open source development environment for Java. This CVE number has been withdrawn...

Moodle 安全漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from a security vulnerability that stems from an insufficient restriction that allows students to bypass sequential...

Moodle 安全漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from an unintended restriction of the Competency Framework tool, which can be used...

Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from a security vulnerability that stems from insufficient authentication leading to a proxy bypass risk, which could...

Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which stems from the presence of a redirection vulnerability...

CVE-2022-48554

CVE-2022-48554 affects the file utility (the Open Source project named “File”) with a stack-based buffer over-read in file_copystr() in funcs.c, before version 5.43. The issue can cause denial of service or potentially memory corruption. Affected distributions/contexts include Apple platforms (ma...

Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from vulnerability to stored cross-site scripting XSS attacks...

OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1, which stems from the incorrect manipulation of the parameter id can lead to sql injection...

Apache Airflow Information Disclosure Vulnerability (CNVD-2023-85617)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow Spark Provider...

编号撤回

rkhunter Rootkit Hunter is rkhunter Rootkit Hunter open source a Unix-based tool. It can scan for Rootkit, backdoors and possible local vulnerability exploits. This CVE number has been withdrawn...

Design/Logic Flaw

Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic Authentication Provider plugin encounters an error when attempting to decode a JWT token. Any Dispatch users...

Join us for VeloCON 2023: Digging Deeper Together!

September 13, 2023 at 9 am ET Rapid7 is thrilled to announce that the 2nd annual VeloCON: Digging Deeper Together virtual summit will be held this September 13th at 9 am ET. Once again, the conference will be online and completely free! VeloCON is a one-day event focused on the Velociraptor...

Atlos 安全漏洞

Atlos is an Atlos open source, non-profit platform used by investigators for large-scale cataloging and verification of eyewitness media. A security vulnerability exists in Atlos version v.1.0 that stems from a vulnerability that allows an authenticated attacker to execute arbitrary code in the...

CVE-2023-40033

CVE-2023-40033 affects Flarum (forum software). The root cause is the intervention/image package interpreting uploaded file contents as a URL, enabling a blind SSRF attack and disclosure of server files when a user uploads a URL-laden file with a spoofed MIME type. Exploitation leads to SSRF, loc...

Google Android Information Disclosure Vulnerability (CNVD-2023-82069)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from a messy proxy in the setMetadata module of MediaSessionRecord.java, which can be exploited by an attacker to obtain sensitive...

Google Android elevation of privilege vulnerability (CNVD-2023-82067)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from improper input validation in the readFrom module of Uri.java, which can be exploited by an attacker to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2024-07112)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-69042)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a logic error in the code of the isServerCertChainValid module of InsecureEapNetworkHandler.java, which can be exploited by an attacke...

Google Android Code Execution Vulnerability (CNVD-2023-82071)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that originates from an incorrect boundary check in the TRANSPOSERSETTINGS module of lpptran.h, which can be exploited by an attacker to execute arbitrary code on t...