Mozilla Thunderbird 缓冲区错误漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The software supports the IMAP and POP email protocols as well as the HTML email format. Mozilla Thunderbird suffers from a buffer error vulnerability that...

Hashicorp Nomad 资源管理错误漏洞

Hashicorp Nomad is a distributed, data center-aware cluster and application scheduler from Hashicorp, USA. The program supports the deployment of microservices, batch, containerized and non-containerized applications. HashiCorp Nomad suffers from a Resource Management Error vulnerability that...

GHSA-47WR-426J-FR82 Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer

Impact Users unpacking a tarball through dbdeployer may use a maliciously packaged tarball that contains symlinks to files external to the target. In such scenario, an attacker could induce dbdeployer to write into a system file, thus altering the computer defences. Mitigating factors For the...

CVE-2022-22536

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the...

OS Command Injection in microweber/microweber

Description OS command injection also known as shell injection is a web security vulnerability that allows an attacker to execute arbitrary operating system OS commands on the server that is running an application, and typically fully compromise the application and all its data. Very often, an...

PT-2022-12009 · Acronis · Acronis Cyber Protect Home Office +4

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 Windows versions before build 28035 Acronis Agent Windows versions before build 27147 Acronis Cyber Protect Home Office Windows versions before build 39612 Acronis True Image 2021 Windows versions before build 39287...

Design/Logic Flaw

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system...

Mageia: Security Advisory (MGASA-2020-0429)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KING JIM Label printer 访问控制错误漏洞

KING JIM Label printer is a label printer from KING JIM Japan. An access control error vulnerability exists in the KING JIM Label printer, which stems from the product not adding adequate protection for credentials. An attacker could use this vulnerability to obtain credentials, connect to a Wi-F...

NVIDIA SHIELD TV 权限许可和访问控制问题漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. The NVIDIA SHIELD TV suffers from a privilege license and access control issue vulnerability that stems from a failure to restrict AHB-DMA access in the BROM, distributed with the Android image of the NVIDIA-supplied T21...

ROS-2-2047

2.2047 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code remotely and completely compromise the vulnerable system by using specially crafted requests...

Unspecified Vulnerability in AMD Graphics Driver (CNVD-2021-100382)

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to compromise a system by an unprivileged user...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to improper code generation management, allows attackers to execute arbitrary code and cause the system to be completely compromised.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code, leading to a complete compromise of the system...

CVE-2021-36313

Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

Input validation

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the system...

CVE-2020-12963

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the system...

CVE-2020-12963

CVE-2020-12963 is an insufficent pointer validation vulnerability in the AMD Graphics Driver for Windows 10. It affects AMD Graphics Driver for Windows 10; unprivileged users could compromise the system. Mitigations: update to AMD Radeon Software / Enterprise Driver versions 20.11.2+ (and 21.Q1 E...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to compromise a system by an unprivileged user...

Critical Linux Kernel Bug Allows Remote Takeover

A critical heap-overflow security vulnerability in the Transparent Inter Process Communication TIPC module of the Linux kernel could allow local exploitation and remote code execution, leading to full system compromise. TIPC is a peer-to-peer protocol used by nodes within a Linux cluster to...