5218 matches found
hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
GLSA-202210-03 : libxml2: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-03 libxml2: Multiple Vulnerabilities - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree....
CVE-2022-38977
The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data...
UNISOC chipset 缓冲区错误漏洞
UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset. The vulnerability stems from a lack of boundary checking in the sensor driver, which may result in out-of-bounds writes, and may be exploited by an attacker to...
UNISOC chipset 缓冲区错误漏洞
UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset. The vulnerability stems from a lack of boundary checking in the sensor driver, which may result in out-of-bounds writes, and may be exploited by an attacker to...
Adobe ColdFusion path traversal vulnerability
Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. Adobe ColdFusion is vulnerable to a path traversal vulnerability that could be exploited to cause arbitrary file system writes...
Dell BIOS Buffer Overflow Vulnerability (CNVD-2023-08760)
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell, U.S.A. A buffer overflow vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to cause arbitrary writes during SMM by manipulating the SMI...
UNISOC chipset缓冲区错误漏洞
The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in UNISOC chipset. The vulnerability stems from the lack of boundary checking in the face detection driver, which may result in out-of-bounds writes, which can be exploite...
CVE-2022-38977
The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data...
UNISOC chipset 缓冲区错误漏洞
UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset. The vulnerability stems from a lack of boundary checking in the sensor driver, which may result in out-of-bounds writes, and may be exploited by an attacker to...
UNISOC chipset 缓冲区错误漏洞
The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in UNISOC chipset. The vulnerability stems from the lack of boundary checking in the face detection driver, which may result in out-of-bounds writes, which can be exploite...
Adobe ColdFusion 缓冲区错误漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. Adobe ColdFusion has a security vulnerability. An attacker can exploit the vulnerability to execute...
Adobe ColdFusion 缓冲区错误漏洞
Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a security vulnerability that could be...
Adobe ColdFusion 路径遍历漏洞
Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. Adobe ColdFusion is vulnerable to a path traversal vulnerability that could be exploited to cause arbitrary file system writes...
hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
Facebook Hermes 缓冲区错误漏洞
Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but is not applicable to server-side infrastructures such as browsers & Node.js. Facebook Hermes suffer...
MediaTek chip vowe local privilege elevation vulnerability
MediaTek Inc. is the world's fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices a year with MediaTek chips built into them available around the world...
Amazon Linux 2 : libxml2 (ALAS-2022-1848)
The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1848 advisory. A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input...
