CVE-2022-23848

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability...

PT-2022-16289

Name of the Vulnerable Software and Affected Versions Alluxio versions prior to 2.7.3 Description The issue arises from the logserver not validating the input stream. This is a distinct problem and not related to the Log4j vulnerability. Recommendations For versions prior to 2.7.3, update to...

Google Chrome Heap Corruption Vulnerability (CNVD-2020-05134)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap corruption vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from insufficient data validation of streams in Goog...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06201)

Android on Nexus 6 is an open source Linux-based operating system for the Nexus 6 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

UBUNTU-CVE-2014-9867

drivers/media/platform/msm/camerav2/isp/msmispaxiutil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate the number of streams, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749629 and Qualcom...

Debian Security Advisory DSA 1537-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory DSA 1537-1. OpenVAS Vulnerability Test $Id: deb15371.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1537-1 xpdf Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...