SAMSUNG eMMC 安全漏洞

SAMSUNG eMMC is a standard for flash memory cards from Samsung South Korea. A security vulnerability exists in SAMSUNG eMMC versions KLMAG2GE4A and KLM8G1WEMB, which originates from a code bypass via electromagnetic fault injection, which allows an attacker to successfully authenticate and write ...

ROS-20241015-04

A vulnerability in the Hotspot component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to incorrect resource clearing or release. Exploitation of the vulnerability could allow an attacker acting remotely to cause a...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-39527

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface CLI of Juniper Networks Junos OS on SRX Series devices allows a local, low-privileged user with access to the Junos CLI to view the contents of protected files on the file system. Through the...

PT-2024-41070 · Мир Кт-51 +1 · Мир Кт-51 +1

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР конфигуратора контроллеров affected versions not specified Description: The issue is related to the implementation of the FTP protocol, which transmits data in an open form. This could allow a remote attacker to disclose...

Juniper Networks Junos OS 信息泄露漏洞

Juniper Networks Junos OS is a Juniper Networks, Inc. network operating system dedicated to the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An information disclosure vulnerability exists in Juniper Networks Junos OS. An attacker could exploit this...

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS is related to improper restrictions on the path name to the directory. Exploiting this vulnerability can allow attackers to compromise the confidentiality of the protected information...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control mechanisms. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Microsoft Edge browser, related to errors in the use of standard permissions, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to errors in the use of standard permissions. Exploiting this vulnerability can allow a perpetrator to remotely disclose protected information...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader (formerly Foxit Reader), allows a perpetrator to disclose protected information.

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader formerly Foxit Reader, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information using a...

The vulnerability of the AcroForms processor in the PDF viewer software from Foxit PDF Reader allows a perpetrator to disclose protected information.

The vulnerability of the AcroForms processor in the PDF document viewing software Foxit PDF Reader is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in representing specified functions, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to errors in representing certain functions. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the AcroForms processor in the PDF viewer software from Foxit Reader (formerly Foxit Reader) allows a perpetrator to disclose protected information.

The vulnerability of the AcroForms processor in the PDF electronic document viewing software Foxit PDF Reader formerly Foxit Reader is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a...

PT-2024-7778 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3-S8 Junos OS version 22.2 prior to 22.2R3-S5 Junos OS version 22.3 prior to 22.3R3-S4 Junos OS version 22.4 prior to 22.4R3-S4 Junos OS version 23.2 prior to 23.2R2-S2 Junos OS version 23.4 prior to 23.4R2...

The vulnerability of FortiOS operating systems, related to deficiencies in access control, allows attackers to compromise the integrity of protected information.

The vulnerability of FortiOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information...

The vulnerability of the RunJar.run() function on the distributed development and execution platform for Apache Hadoop allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RunJar.run function on the distributed development and execution platform for Apache Hadoop is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2024-6841 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can allow...