StarTrinity Softswitch Input Validation Error Vulnerability

StarTrinity Softswitch is a highly reliable softswitch from StarTrinity. An input validation error vulnerability exists in StarTrinity Softswitch version 2023-02-16 that stems from the presence of an open redirect...

Vim 输入验证错误漏洞

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim 9.0.1846 that stems from the presence of an integer overflow or wrap-around issue. A remote attacker can exploit this vulnerability by sending a malicious HTTP or HTTPS request to execute...

RELIC Input Validation Error Vulnerability

RELIC is a modern research cryptography meta-toolkit open-sourced by relic-toolkit that emphasizes efficiency and flexibility. A security vulnerability exists in previous versions of RELIC 421f2e91cf2ba42473d4d54daf24e295679e290e that originated from a vulnerability that allows an attacker to...

memos input validation error vulnerability

memos is an open source hosted memo center with knowledge management and social features. An input validation error vulnerability exists in memos versions prior to 0.13.2, which stems from incorrect input validation...

FreeRDP 输入验证错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that stems from an out-of-bounds write vulnerability in the gdiCreateSurface function...

Acronis Cloud Manager 输入验证错误漏洞

Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. Acronis Cloud Manager suffers from an input validation error vulnerability that stems from improper inpu...

FreeRDP 数字错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that originates when insufficient blockLen is provided and proper length validation is not performed, which can be exploited by an attack...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from an input validation error vulnerability, which originates on Windows, where an integer overflow may occur, which RecordedSourceSurfaceCreation leads to a heap buffer overflow, which may disclos...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the sub7D858 function failing to correctly...

Juniper Networks Junos OS和Junos OS Evolved 输入验证错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos...

You do not have permission to create/update the database “” on Server “” during CVAD site setup

Studio UI Error You do not have permission to create/update the database “DATABASE” on server “SQLSERVER\InstanceName, Port”. Provide credentials for an account with that permission during site setup for Always-On SQL Server Windows Event ID 36884 The certificate received from the remote server...

Tenda AC23 输入验证错误漏洞

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. The Tenda AC23 suffers from a stack buffer overflow vulnerability that stems from the...

Tenda AC23 输入验证错误漏洞

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. The Tenda AC23 suffers from a stack buffer overflow vulnerability, which stems from the...

CP-Plus DVR 输入验证错误漏洞

CP-Plus DVR is a digital video recorder from CP-Plus. A security vulnerability exists in CP-Plus DVR that stems from incorrect input validation, which allows an unauthenticated, remote attacker to change the system time of a target device by sending a specially crafted HTTP request to the...

Rizin 输入验证错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. An input validation error...

Lenovo notebook 安全漏洞

Lenovo Notebook is a notebook computer from Lenovo, a Chinese company. The Lenovo notebook suffers from a security vulnerability that originates from a security issue in the LCFC BIOS that results in incorrect buffer validation, which can be exploited by an attacker to execute arbitrary code...

Kubernetes 输入验证错误漏洞

Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. Kubernetes suffers from a security vulnerability that stems from the fact that a user who creates a Pod on a Windows node can...

Hitachi Energy AFF66x

1. EXECUTIVE SUMMARY ​CVSS v3 9.6 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Hitachi Energy ​Equipment: AFF66x ​Vulnerabilities: Cross-site Scripting, Use of Insufficiently Random Values, Origin Validation Error, Integer Overflow or Wraparound, Uncontrolled Resource...

OpenStack Horizon 输入验证错误漏洞

OpenStack Horizon is a Django-based project for OpenStack designed to provide complete OpenStack dashboards and an extensible framework for building new dashboards from reusable components. A security vulnerability exists in OpenStack Horizon versions 19.4.0 through 20.1.4 that stems from a...

Tengine 输入验证错误漏洞

Alibaba Tengine is a web server from the Chinese company Alibaba Group Alibaba. A security vulnerability exists in Tengine version 2.2.2, which stems from an integer overflow vulnerability. An attacker can exploit this vulnerability to cause sensitive information to be disclosed by sending a...