ROS-20240827-20

The vulnerability in the Ruby interpreter is related to improper neutralization of input data during generation of the of a web page. Exploitation of the vulnerability could allow an attacker acting locally to conduct cross-site scripting Vulnerability in the Active Storage component of the Ruby...

ROS-20240827-19

The vulnerability in the Ruby interpreter is related to improper neutralization of input data during the generation of a of a web page. Exploitation of the vulnerability could allow an attacker acting locally to conduct cross-site scripting Vulnerability in the Active Storage component of the Rub...

Dell Enterprise Storage Integrator 访问控制错误漏洞

Dell Enterprise Storage Integrator Dell ESI is a storage application from Dell USA. An Access Control Error vulnerability exists in Dell Enterprise Storage Integrator version 10.0, which stems from an incorrect access control vulnerability contained in the EHAC component. No details of the...

CVE-2023-43317

An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storage component...

CVE-2023-43317

An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storage component...

CVE-2023-43317

An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storage component...

CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

The vulnerability of Google Chrome’s Storage component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Storage component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the Storage component in Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.

The vulnerability of the Storage component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created web page...

The vulnerability of the Storage component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Storage component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Denial Of Service (DoS)

chromium-browser is vulnerable to denial of service. An attacker can cause an application crash through the use after free in storage component...

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

Input validation

Adobe Experience Manager version 6.5.9.0 and earlier is affected by a improper certificate validation vulnerability in the cold storage component. If an attacker can achieve a man in the middle when the cold server establishes a new certificate, they would be able to harvest sensitive information...

Apple iOS Photos Storage Component Sandbox Authentication Bypass Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Photos Storage is one of the components of Photos Storage. A security vulnerability exists in the Photos Storage component in Apple iOS versions prior to 12.3. An attacker can exploit this vulnerability to bypass sandboxing...

Race condition

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...

Security feature bypass

The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass vulnerability when it fails to validate an integrity-level check, aka "Windows Storage Security...

The vulnerability in the web interface of the API/Storage component of the Unitrends Backup tool allows a perpetrator to bypass authentication procedures or execute arbitrary commands with root privileges.

The vulnerability in the web interface of the Unitrends Backup backup tool’s storage component is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process or execute arbitrary commands with root privileges...