CVE-2022-22289

Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...

CVE-2021-4068

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2021-7517 · Vim +7 · Vim +7

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to an out-of-bounds read in the vim text editor. This allows a remote attacker to access confidential data and cause a denial of service. Recommendations: At the moment,...

PT-2021-7889

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 108 Thunderbird versions prior to 102.6.1 Firefox ESR versions prior to 102.6 Description The issue is related to a file's filename being truncated, potentially leading to user confusion and the execution of malicious...

SAE WPA Supplicant Information Disclosure

The vulnerability of the SAE implementation of the wpasupplicant function for wireless communication devices with WPA certification is related to errors in timing and access patterns to the cache. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

PT-2021-6434 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.36 and prior MySQL Server versions 8.0.27 and prior Description: The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: Security: Privileges component. This...

VulnCheck KEV: CVE-2020-8599

Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login...

RabbitMQ Data Compromise

The vulnerability of the RabbitMQ messaging broker is related to improper validation of user input. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Archive_Tar Path Traversal

The vulnerability of the Tar.php file in the ArchiveTar package from the PHP PEAR library is related to improper handling of symbolic links. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

VNC Authentication

The vulnerability of the software for implementing VNC TigerVNC is related to improper handling of TLS certificate exceptions. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...

QEMU Hardware Emulation Buffer Overflow DoS

The vulnerability in the hw/net/tulip.c component of the QEMU hardware emulation software involves writing beyond the buffer boundaries during copy operations for TX/RX data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, a...

Google Chrome V8 Heap Buffer Overflow DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to access confidential data and also cause service interruptions through a specially created HTML page...

Ffmpeg Gaussian Blur Buffer Overflow DoS

The vulnerability of the gaussianblur component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

CVE-2021-35585

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive...

PT-2021-4740

Name of the Vulnerable Software and Affected Versions Mac OS affected versions not specified Description The issue is related to a module for displaying web pages in WebKit, which is part of the Mac OS operating system family. It involves the possibility of concurrent execution using a shared...

CVE-2021-20802

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product...

Flask Extension Privilege Management

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

Confluent Ansible 安全漏洞

Confluent Ansible is a product from the US-based Confluent, Inc. It provides an easy way to deploy, manage and configure Confluent Platform services. A security vulnerability exists in Confluent Ansible cp-ansible versions 5.5.0, 5.5.1, 5.5.2, and 6.0.0, in which its auxiliary components are...

GitLab Confidential Data Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its...

PrologSlurmctld EpilogSlurmctld SLURM Privilege Management

The vulnerability of the PrologSlurmctld and EpilogSlurmctld scripts in the SLURM resource management tool is related to improper handling of the environment. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...