The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers allows a perpetrator to gain access to protected information.

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

Unauthorized Access Vulnerability in Panavision e-office

Panmicro e-office system is the standard, easy to use, rapid deployment of on-line professional collaborative OA software. An unauthorized access vulnerability exists in Panmicro e-office, which can be exploited by an attacker to log in to the backend and perform unauthorized operations...

infinite loop when cleaning up IRQ vectors

ISSUE DESCRIPTION When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checked, the checking CPU m...

Arbitrary File Read Vulnerability in Chemical Virtual Simulation Laboratory of Beijing Obier Software Technology Development Co.

Ltd. is a high-tech enterprise focusing on the development and promotion of computer simulation technology, virtual reality technology, network technology, mainly dedicated to providing virtual simulation software, network platform and supporting hardware equipment development and technical...

Denial of Service Vulnerability in INHECO On Deck Thermal Cycler 8100100

On Deck Thermal Cycler 8100100 is a temperature controller from INHECO, Germany, that supports Ethernet communication. A denial of service vulnerability exists in the INHECO On Deck Thermal Cycler 8100100, which can be exploited by attackers to launch denial of service attacks...

Bloodx CMS has a flawed logic vulnerability

BloodX CMS is a cms. Bloodx CMS suffers from a logic flaw vulnerability that can be exploited by an attacker to obtain sensitive system information...

Apache Traffic Server Sensitive Information Disclosure Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to bypass access restrictions to data via the server's negative cache poisoning ...

CVE-2020-29597

creationtimestamp| type| source ---|---|--- 2020-12-07 22:30:17+00:00| seen| https://t.me/cibsecurity/17206 2024-12-17 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-17 2025-01-21 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

ImageMagick has an unspecified vulnerability (CNVD-2021-10256)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A security vulnerability exists in ImageMagick.h in versions of ImageMagick prior to 7.0.9-0 in which MagickCore/quantum.h has a range of representable values outside th...

GNU C Library Assertion Failure Vulnerability

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. An assertion failure vulnerability exists in the iconv function in GNU C Library versions 2.30 through 2.32. An attacker can exploit this vulnerability to cause a denial of service via UC...

ImageMagick integer overflow vulnerability (CNVD-2021-10261)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting ...

Denial of Service Vulnerability in the MP3009 Processor of the Schneider Tricon Safety Instrumented System (CNVD-2020-70793)

The Tricon Safety Instrumented System is a safety instrumented system from Schneider Electric Co. The MP3009 module is the processor module for the Schneider Tricon Safety Instrumented System. A denial of service vulnerability exists in the MP3009 processor of the Schneider Tricon Safety...

CVE-2020-13497

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This vulnerability could be used to bypass mitigations and aid further exploitatio...

ACS SpiiPlusEC-08 suffers from a denial of service vulnerability (CNVD-2020-70574)

ACS Motion Control is an Israel-based, OEM-oriented supplier of motion controllers and drive solutions for a wide range of high-tech systems in semiconductor manufacturing, laser processing, additive manufacturing, flat panel display manufacturing, electronics assembly, life sciences, and more. A...

McAfee Total Protection Elevation of Privilege Vulnerability

McAfee Total Protection is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection versions prior to 16.0.29. An attacker can exploit the elevation of privilege vulnerability by creating a junction link to manipulate a folder...

Ksix Zigbee Devices Playback Protection Bypass Exploit

Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass PoC Exploit Author: Alejandro Vazquez Vazquez Vendor Homepage: https://www.ksixmobile.com/ Firmware Version: Gateway Zigbee Module - v1.0.3, Gateway Main Module - v1.1.2, Door Sensor - v1.0.7, PIR Motion Sensor - v1.0.12 Tested on:...

ACS SpiiPlusEC-08 has a Denial of Service Vulnerability

ACS Motion Control is an Israel-based, OEM-oriented supplier of motion controllers and drive solutions for a wide range of high-tech systems in semiconductor manufacturing, laser processing, additive manufacturing, flat panel display manufacturing, electronics assembly, life sciences, and more. A...

SQL Injection Vulnerability in mkcms Backend

mkcms is a film and television management system developed specifically for different webmasters. There are SQL injection vulnerabilities in the mkcms backend, which can be exploited by attackers to gain access to sensitive database information...

Arbitrary File Write Vulnerability in Jinhe OA-C6

Jinhe OA system product C6 collaborative management platform has more than 20 application modules, more than 160 application sub-modules, involving enterprise management business including collaborative office management, human resource management, project management, customer relationship...

BASETech GE-131 BT-1837836 Information Disclosure Vulnerability

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An information disclosure vulnerability exists in the BASETech GE-131 BT-1837836. An attacker can exploit the vulnerability to remotely access the video stream via an unrecorded user...