353 matches found
Unbound < 1.6.8 Wildcard Synthesized NSEC Records Handling Remote Validation Weakness
According to its self-reported version number, the remote Unbound DNS resolver is affected by a validation weakness when handling wildcard synthesized NSEC records. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106384; scriptversion"1.5"; scriptcvsdate"Date:...
The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to replace the domain name.
The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a domain name using a specially crafted domain name that includes IDN Internationalized Domain Names...
nodejs ejs denial of service vulnerability
nodejs ejs is an embedded JavaScript template with flow control, customizable delimiters and escaped output. A security vulnerability exists in the 'ejs.renderFile' function in nodejs ejs versions prior to 2.5.5, which stems from weak input validation. An attacker can exploit the vulnerability to...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the update mechanism for dynamic JAR files used in cloud service development tools like Context Service Software Development Kit allows a perpetrator to execute arbitrary code.
The vulnerability of the mechanism for updating dynamic JAR files used in cloud service development tools like Context Service Software Development Kit exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the...
The vulnerability of the Microsoft Office suite and Skype for Business messaging software allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Office suite and the Skype for Business messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted content...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process
The vulnerability of the PowerShell script for the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to bypass certificate verification...
The vulnerability of Google Chrome browser allows a perpetrator to bypass the certificate verification process.
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification by using a specially created HTML page...
Unbound < 1.5.2 Upstream Server Trust Anchor Unspecified DNSSEC Validation Weakness
According to its self-reported version number, the remote Unbound DNS resolver is affected by an unspecified DNSSEC validation weakness that is triggered when an upstream server with different trust anchors introduces unsigned records in messages. C Tenable Network Security, Inc...
Kingsoft Defender Elevation of Privilege Vulnerability
Kingsoft Defender is a free security software with strong Trojan detection capability, fast vulnerability detection and compact size produced by Kingsoft Network Technology Co. The system service installed by Kingsoft Defender provides the function of creating high-privilege processes, but there...
qemu: virtio: insufficient validation of num_sg when mapping
The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...