Apple 多款产品安全漏洞

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple watchOS is an operating system for smartwatches. A security vulnerability exists in multiple Apple products, which originates from ...

The vulnerability of the tjInitDecompress() function in the libjpeg-turbo image processing library allows a attacker to compromise the accessibility of protected information.

The vulnerability of the tjInitDecompress function in the libjpeg-turbo image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information by consuming excessive memory resources...

The vulnerability of the libjpeg-turbo image processing library allows attackers to compromise the accessibility of protected information.

The vulnerability of the libjpeg-turbo image processing library is related to insufficient handling of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information by consuming excessive memory through a specially crafted JPEG file...

The vulnerability of the decode_mcu() function in the libjpeg-turbo library allows a attacker to compromise the accessibility of protected information.

The vulnerability of the decodemcu function in the libjpeg-turbo library is related to resource management errors. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information by excessive consumption of processor resources...

PT-2021-7120 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to information disclosure. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment,...

The vulnerability of the Windows operating system’s kernel, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the print spooler daemon in Windows operating systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to print queues is associated with the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Fast FAT File System Driver for the Windows operating system, related to the disclosure of protected information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Fast FAT File System Driver for the Windows operating system is related to the disclosure of protected information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Excel editors, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Excel editors is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Rich Text Edit Control text editor in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Rich Text Edit Control text editor in the Windows operating system is related to the disclosure of information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

CVE-2021-30850

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system...

python-tuf 路径遍历漏洞

python-tuf is an open source framework for protecting software update systems and is the Python reference implementation of The Update Framework TUF. A path traversal vulnerability exists in python-tuf versions prior to 0.19, which stems from a failure of a networked system or product to properly...

GitLab: IDOR in "external status check" API leaks data about any status check on the instance

Summary The API endpoint for returning approval from an external status check contains an IDOR that lets a user list information about all external status checks on the GitLab instance. The feature is an Ultimate feature, but can be accessed by starting an Ultimate trial on GitLab.com. So the...

The vulnerability of the exFAT file system of the Windows operating system, which is related to the disclosure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the exFAT file system of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Windows operating system, related to the exposure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of Microsoft SharePoint Server packages, related to errors in information presentation by the user interface, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server packages is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows operating system’s Bind Filter driver, related to the disclosure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the Windows operating system’s Bind Filter driver is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability in the VMI web interface of vCenter Server Appliance, a management tool for VMware vCenter Server virtual infrastructure, allows an attacker to gain unauthorized access to protected information.

The vulnerability in the VCenter Server Management Interface of the VMware vCenter Server web interface relates to deficiencies in system security restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending a specially crafte...

The vulnerability of the Moxa MXView network control software, related to the insecure transmission of credentials, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Moxa MXView network control software is related to the insecure transmission of credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2021-4415 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Print Spooler. It allows a remote attacker to gain unauthorized access to protected information...