13218 matches found
Moddable SDK 安全漏洞
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. A security vulnerability exists in Moddable SDK v11.5.0, which was discovered to contain a SEGV vulnerability via the component fini. No details of the vulnerability are currently available...
Moddable SDK 缓冲区错误漏洞
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. v11.5.0 of the Moddable SDK is vulnerable to a heap buffer overflow vulnerability that stems from a boundary error in the asanmemcpy component when handling untrusted input. A remote attacker...
Security Bulletin: Security vulnerabilities have been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Federated Identity Manager
Summary IBM® SDK, Java™ Technology Edition is shipped with IBM Tivoli Federated Identity Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
CVE-2021-38789
Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...
CVE-2021-38789
Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...
CVE-2021-38789
Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...
Improper access control
Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...
CVE-2021-38789
Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...
CVE-2021-38789
CVE-2021-38789 affects Allwinner R818 SoC with Android Q SDK V1.0. The issue is an incorrect access control vulnerability where the caller’s permission is not checked, enabling a non-specified third-party app to change system settings. Connected documents confirm the affected product and root cau...
CVE-2021-43045
A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...
Denial of service
The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious apps can use the interface provided by the service to set the number of applications allowed to run in the background to 0 and add themselves to the whitelist, so that once other...
CVE-2021-38788
The CVE-2021-38788 entry concerns the Allwinner R818 background service in the Android Q SDK v1.0. The vulnerability arises in the service that manages background processes; a malicious app can call the service interface to set the allowed number of background applications to 0 and add itself to ...
CVE-2021-38787
There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...
CVE-2021-38787
There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...
CVE-2021-38787
There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...
Integer overflow
There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...
CVE-2021-38787
CVE-2021-38787 affects Allwinner R818 SoC Android Q SDK V1.0 where an integer overflow in the ION driver ("/dev/ion") can be triggered via the COMPAT_ION_IOC_SUNXI_FLUSH_RANGE ioctl, leading to a system crash (denial of service). Connected sources confirm the vulnerable component is the ION drive...
CVE-2021-38786
Summary of CVE-2021-38786 (Allwinner R818): There is a NULL pointer dereference in the media/libcedarc/vdecoder component of the Allwinner R818 SoC Android Q SDK V1.0, which can lead to a media crash and a denial of service. This is documented across multiple sources (NVD, Red Hat, CVE listing) w...
Juniper Networks Junos OS Information Disclosure Vulnerability (CNVD-2022-21488)
Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to information disclosure, and no details of the...