Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63067)

Google TensorFlow is an end-to-end open source machine learning platform. a denial-of-service vulnerability exists in Google TensorFlow. An attacker can exploit this vulnerability to cause a denial of service...

Google TensorFlow tf.raw_ops.BoostedTreesCreateEnsemble code execution hole

Google TensorFlow is an end-to-end open source machine learning platform. tf.rawops.BoostedTreesCreateEnsemble in versions prior to Google TensorFlow 2.6.0 has a security vulnerability. An attacker could exploit the vulnerability to execute arbitrary code on the system...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64533)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, has a security vulnerability stemming from the program "tf.rawops. DatasetToTFRecord" implementations can trigger heap buffer overflow and segmentation errors. No detailed vulnerability details are available...

Adobe Connect Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74112)

Adobe Connect, an online video conferencing software, is vulnerable to a reflective cross-site scripting vulnerability in Adobe Connect 11.2.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Exiv2 Infinite Loop Vulnerability (CNVD-2021-61438)

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an infinite loop. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

Huawei EMUI/Magic UI memory address out-of-bounds vulnerability

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI suffers from a memory address out-of-bounds vulnerability that can be exploited by attackers to cause the execution of malicious code...

Cybozu Garoon Workflow Incorrect Input Validation Vulnerability

A security vulnerability exists in Workflow in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change workflow data without proper privileges...

Foxit PDF Reader has a use-after-release vulnerability

Foxit PDF Reader is a PDF reader. Foxit PDF Reader is vulnerable to a post-release exploit that could be used by remote attackers to execute arbitrary code on the target system...

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58260)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites...

Oracle VM VirtualBox has an unspecified vulnerability (CNVD-2021-54711)

Oracle VM VirtualBox is a powerful cross-platform virtualization software for x86 systems.A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.24. An attacker could exploit this vulnerability to cause the product to hang or crash frequently...

Google Chrome Type Obfuscation Vulnerability (CNVD-2021-62171)

Chrome, a web browsing tool developed by Google, is vulnerable to a type obfuscation vulnerability in V8 in versions prior to Google Chrome 91.0.4472.164. An attacker could use this vulnerability to execute arbitrary code on the system or cause the application to crash...

IBM AIX Input Validation Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...

Joomla! Cross-site scripting vulnerability (CNVD-2021-53938)

A cross-site scripting vulnerability exists in versions 3.0.0 to 3.9.27, which could be exploited to lure users into clicking on and executing client-side code to steal user cookie credentials...

Apache Druid Privilege Permission and Access Control Issues Vulnerability

Apache Druid is the United States Apache Apache Foundation of a use of the Java language , written in column-oriented open source distributed database . Apache Druid has a security vulnerability that can be exploited by an attacker to read data from other sources e.g., the local file system using...

Envoy null pointer dereference vulnerability (CNVD-2021-58574)

Envoy is an open source distributed proxy server. versions prior to Envoy 1.71.1 are vulnerable to a null pointer dereference vulnerability, which can be exploited by attackers to crash the program...

Google TensorFlow heap buffer overflow vulnerability (CNVD-2021-37649)

Google TensorFlow is an end-to-end open source machine learning platform. A heap buffer overflow vulnerability exists in tf.rawops.MaxPoolGrad in Google TensorFlow. No detailed vulnerability details are provided at this time...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-36352)

Google TensorFlow is an end-to-end open source machine learning platform. Google TensorFlow has a security vulnerability. The vulnerability stems from incomplete validation of SparseAdd. No details of the vulnerability are provided at this time...

Skyworth Digital Technology RN510 Access Control Error Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. An access control error vulnerability exists in /cgi-bin/testversion.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker can exploit the vulnerability to obtain the SSID password and We...

CloudBees Jenkins OWASP Dependency-Track Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

Invigo Automatic Device Management Arbitrary OS Command Injection Vulnerability

Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. An arbitrary OS command injection vulnerability exists in /admin/admapi.php in...

Envoy licensing issue vulnerability

Envoy is an open source distributed proxy server. Envoy is vulnerable to an authorization issue, which could be exploited by an attacker to bypass authentication by providing a JWT token to an issuer that is not in the provider list...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2021-70134)

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

Unspecified Vulnerability in GitLab (CNVD-2021-26103)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09296)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from improper resource allocation when an affected device...

D-Link DNS-320 Command Injection Vulnerability

The D-Link DNS-320 is a NAS Network Attached Storage device from D-Link Taiwan, China. The D-Link DNS-320 FW v2.06B01 Revision suffers from a command injection vulnerability that stems from the effects of command injection in the mgr.cgi component, which could lead to remote arbitrary code...

ASUS RT-AX86U Buffer Overflow Vulnerability

ASUS RT-AX86U is a wireless router from ASUS China. ASUS RT-AX86U router firmware is vulnerable to a buffer overflow in the blocking request.cgi function of the httpd module, which could be exploited by an attacker to construct malicious data leading to code execution...

Unspecified Vulnerability in Rust (CNVD-2021-13694)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust prior to 0.9.11, which stems from double line deletion by a util::mutate,mutate2 when panic occurs. No details of the vulnerability are provided at this time...

Owasp Json-sanitizer Input Validation Error Vulnerability

Owasp Json-sanitizer is the Owasp Foundation of a Java-based Json can be based on the text content similar to the Json code library to generate data in Json format . An input validation error vulnerability exists in OWASP JSON -sanitizer prior to version 1.2.2, which stems from the fact that a...

Unspecified vulnerability in Red Hat keycloak (CNVD-2021-19381)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. Red Hat Keycloak has a security vulnerability that originates from the exploitation of the Client Registration API, which can be exploited by a...

Nvidia GPU Display Driver Elevation of Privilege Vulnerability

The Nvidia GPU Display Driver is a driver from Nvidia that is used for interactive support of the graphics card display module in the operating system. An elevation of privilege vulnerability exists in NVIDIA GPU Display Driver for Windows and Linux all versions, which stems from a user-mode clie...

NZXT CAM WinRing0x64 Driver Privilege Elevation Vulnerability

NZXT CAM is a performance monitoring software for gaming computers from NZXT. A vulnerability exists in the NZXT CAM WinRing0x64 Driver Privilege I/O Write IRPs feature, which can be exploited by a remote attacker to submit a special I/O request that can be elevated in privilege...

Acronis True Image Access Control Error Vulnerability (CNVD-2021-58666)

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image is vulnerable to an access control error that could be exploited by an...

Microsoft Windows Modules Installer Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Modules Installer, whi...

CloudBees Jenkins VncRecorder Plugin Cross-Site Scripting Vulnerability (CNVD-2020-50510)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncRecorder Plugin is used in one of the scre...

Linux kernel denial of service vulnerability (CNVD-2021-28001)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the go7007sndini file in drivers/media/usb/go7007/snd-go7007.c in Linux kernel versions prior to 5.6. An attacker can explo...

Microsoft Office Input Validation Error Vulnerability (CNVD-2020-24018)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. There is a security vulnerability in Microsoft Office. The vulnerability can be exploited by an attack...

openfortivpn Certificate Validation Mishandling Vulnerability

openfortivpn is a client program for PPP Point-to-Point Protocol + SSL Transport Layer Security Protocol VPN tunneling service. A security vulnerability exists in openfortivpn version 1.11.0 using OpenSSL versions prior to 1.0.2, which stems from a failure to take into account the '' character wh...

CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2020-17202)

CloudBees Jenkins is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . There is a security vulnerability in...

Unspecified Vulnerability in CloudBees Jenkins

CloudBees Jenkins is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . There is a security vulnerability in...

WordPress Unauthorized Operation Vulnerability (CNVD-2020-03944)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress versions prior to 5.3.1, which stems from a lack of access contro...

TYPO3 Path Traversal Vulnerability

TYPO3 is a free and open source content management system written in PHP under the GNU General Public License. A path traversal vulnerability exists in the extraction of manually uploaded ZIP archive files in Extension Manager in TYPO3 versions prior to 8.7.30, 9.x versions prior to 9.5.12, and...

GnuPG Encryption Problem Vulnerability

GnuPG is an open source suite of cryptographic software from the GNU Project under the GNU General Public License. The software supports public key, symmetric encryption, hashing and other algorithms. A cryptographic issue vulnerability exists in versions of GnuPG prior to 2.2.18, which can be...

SimpleSAMLphp Input Validation Error Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider features . A security vulnerability exists in SimpleSAMLphp that stems from the program's failure to properly validate cryptographic signatures in XML files. An attacker ca...

Mozilla Firefox Memory Corruption Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A memory corruption vulnerability exists in Mozilla Firefox version 68, which can be exploited by attackers to corrupt memory and potentially execute arbitrary code...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27086)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

Unspecified Vulnerability in Ruby OpenID

Ruby OpenID is a Ruby library for providing and verifying OpenID identities. A security vulnerability exists in Ruby OpenID 2.8.0 and earlier versions. No details of the vulnerability are provided at this time...

Apache Syncope Information Disclosure Vulnerability (CNVD-2018-18783)

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. Apache Syncope suffers from an information disclosure vulnerabili...

OpenPGP Information Disclosure Vulnerability

OpenPGP is a set of email encryption standards that supports multiple platforms. An information disclosure vulnerability exists in OpenPGP. An attacker could exploit this vulnerability to conduct a man-in-the-middle attack and obtain messages in plaintext form from encrypted emails...

Ulterius Directory Traversal Vulnerability

Ulterius is a set of remote control management tools. A directory traversal vulnerability exists in the 'Process' function of the RemoteTaskServer/WebServer/HttpServer.cs file in versions of Ulterius prior to 1.9.5.0. An attacker can exploit this vulnerability to download files...

Sophos Web Appliance Command Injection Vulnerability

Sophos Web Appliance is a web security gateway solution. An input validation vulnerability in the MgrReport.php file in the web management interface of the Sophos Web Appliance could be exploited by an attacker to submit a special request to inject a system command and execute it...