GitLab Enterprise Edition和GitLab Community Edition 输入验证错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in Gitlab CE/EE versions 11.4 through 15.5.7, 15.6...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an input validation error vulnerability that originates from an index validatio...

AMD Athlon 输入验证错误漏洞

AMD Athlon is a family of microprocessors from UltraMicroelectronics AMD. An input validation error vulnerability exists in AMD Athlon™ Processors, Ryzen™ Processors, and Threadripper™ Processors, which stems from a failure to validate that communication buffers and communication services in the...

Adobe InCopy 输入验证错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

GHSA-2PJ2-GCHF-WMW7 Zip4j Origin Validation Error

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...

CVE-2023-0132: Origin Validation Error

Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. Chromium security severity: Medium...

Pandora 输入验证错误漏洞

Pandora is an analysis framework for finding out if a file is suspicious and displaying the results conveniently. A security vulnerability exists in Pandora version 1.3.0, which stems from the fact that workers/extractor.py allows denial of service when an attacker submits a deeply nested ZIP...

CVE-2023-22899: Origin Validation Error

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive...

bzip2 输入验证错误漏洞

bzip2 is an open source compression/decompression application. A security vulnerability exists in bzip2-rs, which stems from allowing an attacker to cause a denial of service via a large file, which triggers an integer overflow in mem.rs...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the presence of integer overflows and buffer overflows that result in memory corruption. The following products are affected: APQ8064AU, APQ8096AU,...

GPAC MP4Box 输入验证错误漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. An input validation error vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from an input validation error vulnerability that stems from an issue with a Qualcomm closed-source component...

go-ipld-prime 输入验证错误漏洞

go-ipld-prime is an IPLD open source implementation of the ipld specification interface. A input validation error vulnerability exists in go-ipld-prime, which stems from the fact that its encoded data containing Bytes class nodes will pass a Bytes token to the JSON encoder, since it does not expe...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

http4s 输入验证错误漏洞

http4s is an open source streaming HTTP server for Scala. An input validation error vulnerability exists in several versions of http4s, which stems from the fact that its User-Agent and Server header parsers are prone to fatal errors in processing certain input. The following versions are affecte...

UNISOC chipset 输入验证错误漏洞

The UNISOC chipset is an integrated circuit chipset from China's Ziguang Zhanrui UNISOC. The UNISOC chipset suffers from an input validation error vulnerability that stems from a lack of boundary checking in the wlan driver, which could lead to a local denial of service in the wlan service...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that is exploited by attackers to escalate privileges without additional execution privileges...

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a mishandling in the Wi-Fi driver that could result in undefined behavior, which could lead to a local privilege escalation that requir...

kenny2automate 输入验证错误漏洞

kenny2automate is a small Discord bot by the individual developers at AbyxDev. An input validation error vulnerability exists in previous versions of kenny2automate a947d7c, which stems from a failure to perform validation to ensure that the submitted channel ID actually belongs to the server bei...

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal for ArcGIS version 11 an...