The vulnerability of software for implementing VNC and TigerVNC lies in authentication process errors, which allow attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the software for implementing VNC TigerVNC is related to improper handling of TLS certificate exceptions. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser, which involves reading data beyond the allowed buffer limit, allows attackers to access confidential data and cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to access confidential data and also cause service interruptions through a specially created HTML page...

The vulnerability in the `hw/net/tulip.c` component of the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the hw/net/tulip.c component of the QEMU hardware emulation software involves writing beyond the buffer boundaries during copy operations for TX/RX data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, a...

The vulnerability of the gaussianblur component in the Ffmpeg library, which is related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gaussianblur component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

PT-2021-4740 · Apple · Webkit +1

Name of the Vulnerable Software and Affected Versions: Mac OS affected versions not specified Description: The issue is related to a module for displaying web pages in WebKit, which is part of the Mac OS operating system family. It involves the possibility of concurrent execution using a shared...

The vulnerability of the Flask software’s extension relates to insecure privilege management. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

Confluent Ansible 安全漏洞

Confluent Ansible is a product from the US-based Confluent, Inc. It provides an easy way to deploy, manage and configure Confluent Platform services. A security vulnerability exists in Confluent Ansible cp-ansible versions 5.5.0, 5.5.1, 5.5.2, and 6.0.0, in which its auxiliary components are...

The vulnerability of the Thunar file manager, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Thunar file manager is related to the use of another program without user confirmation when the file is used as an acommand. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts of the SLURM resource management tool, related to privilege management errors, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts in the SLURM resource management tool is related to improper handling of the environment. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...

The vulnerability of the autoindex module of the NGINX server, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NGINX server’s autoindex module is related to incorrect processing of years with four or more digits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficiently checking incoming requests. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its...

PT-2021-6545 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 1.0.1 Description: The issue is related to a memory leak in the def parent box new function of the MP4Box component in the GPAC multimedia platform. This leak occurs due to incorrect memory deallocation before the last reference...

PT-2021-6519 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the infe box read function of the MP4Box component in the GPAC multimedia platform. This allows attackers to read memory via a crafted file, potentially giving them acce...

QSW-M2116P-2T2S 安全漏洞

The Qnap Systems QSW-M2116P-2T2S is a 90-watt 10GbE PoE++ and 30-watt 2.5GbE PoE+ managed switch for Wi-Fi Generation 6 from Qnap Systems. A security vulnerability exists in QSW-M2116P-2T2S that could allow a remote attacker to read sensitive information by accessing an unrestricted storage...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

The vulnerability of the Adobe Digital Editions e-book reading program, related to reading beyond the buffer limit, allows a intruder to disclose protected information.

The vulnerability of the Adobe Digital Editions e-book reading software relates to reading outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

DEBIAN-CVE-2021-39152

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...

CVE-2021-39150

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...

PT-2021-22409

Name of the Vulnerable Software and Affected Versions XStream versions prior to 1.4.18 Description XStream is a simple library to serialize objects to XML and back again. In affected versions, this issue may allow a remote attacker to request data from internal resources that are not publicly...

Prestashop SQL注入漏洞

Prestashop is a set of open source e-commerce solutions from the United States Prestashop. The solution provides a variety of payment methods, SMS alerts and product image scaling and other features. Prestashop 1.7.8 before the version of the SQL injection vulnerability , the vulnerability stems...