All Posts by: Virtual Patching

Irzip 0.631 stream.c ucompthread null pointer dereference

A vulnerability classified as problematic was found in Irzip 0.631. Affected by this vulnerability is the function ucompthread of the

Common Vulnerabilities and Exposures

LabCup up to 6.3.0.02 Save API improper authentication

A vulnerability, which was classified as critical, has been found in LabCup up to 6.3.0.02. Affected by this issue is

Common Vulnerabilities and Exposures

XScreenSaver 5.45 Video Output update_screen_layout buffer overflow

A vulnerability, which was classified as critical, was found in XScreenSaver 5.45. This affects the function update_screen_layout of the component

Common Vulnerabilities and Exposures

Trace Financial CRESTBridge up to 6.3.0.01 sql injection [CVE-2020-24667]

A vulnerability has been found in Trace Financial CRESTBridge up to 6.3.0.01 (Financial Software) and classified as critical. This vulnerability

Common Vulnerabilities and Exposures

Trace Financial CRESTBridge up to 6.3.0.01 sql injection [CVE-2020-24671]

A vulnerability was found in Trace Financial CRESTBridge up to 6.3.0.01 (Financial Software) and classified as critical. This issue affects

Common Vulnerabilities and Exposures

MongoDB Go Driver up to 1.5.0 BSON injection

A vulnerability was found in MongoDB Go Driver up to 1.5.0 (Database Software). It has been classified as critical. Affected

Common Vulnerabilities and Exposures

F5 BIG-IP APM/BIG-IP APM Clients Windows Installer Service permission

A vulnerability was found in F5 BIG-IP APM and BIG-IP APM Clients (Firewall Software) (affected version unknown). It has been

Common Vulnerabilities and Exposures

Irzip 0.631 stream.c lzma_decompress_buf use after free

A vulnerability was found in Irzip 0.631. It has been rated as problematic. Affected by this issue is the function

Common Vulnerabilities and Exposures

Trace Financial CRESTBridge up to 6.3.0.01 cross site scripting

A vulnerability classified as problematic was found in Trace Financial CRESTBridge up to 6.3.0.01 (Financial Software). This vulnerability affects an

Common Vulnerabilities and Exposures

McAfee Agent up to 5.7.2 on Windows MA Event Folder privileges management

A vulnerability, which was classified as critical, has been found in McAfee Agent up to 5.7.2 on Windows. This issue

Common Vulnerabilities and Exposures

McAfee Agent up to 5.7.2 on Windows uncontrolled search path

A vulnerability, which was classified as critical, was found in McAfee Agent up to 5.7.2 on Windows. Affected is some

Common Vulnerabilities and Exposures

NetSetMan Pro up to 4.x Save Log to File Local Privilege Escalation

A vulnerability has been found in NetSetMan Pro up to 4.x and classified as critical. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Backdoor.Win32.Zombam.gen HTML Web UI command injection

A vulnerability was found in Backdoor.Win32.Zombam.gen (Remote Access Software) (affected version not known) and classified as critical. Affected by this

Common Vulnerabilities and Exposures

Backdoor.Win32.Zombam.gen HTML Web UI buffer overflow

A vulnerability was found in Backdoor.Win32.Zombam.gen (Remote Access Software) (the affected version unknown). It has been classified as critical. This

Common Vulnerabilities and Exposures

Backdoor.Win32.Zombam.gen HTML Web UI cross site scripting

A vulnerability was found in Backdoor.Win32.Zombam.gen (Remote Access Software) (the affected version is unknown). It has been declared as problematic.

Common Vulnerabilities and Exposures

Apport prior 2.20.11-0ubuntu57 /proc/pid/stat get_starttime input validation

A vulnerability classified as critical has been found in Apport. Affected is the function get_starttime of the file /proc/pid/stat. Upgrading

Common Vulnerabilities and Exposures

QNAP QSS source code [CVE-2021-28805]

A vulnerability classified as problematic was found in QNAP QSS (affected version unknown). Affected by this vulnerability is some unknown

Common Vulnerabilities and Exposures

QNAP Helpdesk up to 3.0.3 access control [CVE-2021-28814]

A vulnerability, which was classified as critical, has been found in QNAP Helpdesk up to 3.0.3. Affected by this issue

Common Vulnerabilities and Exposures

JerryScript 2.2.0 js-parser.c parser_parse_source assertion

A vulnerability, which was classified as critical, was found in JerryScript 2.2.0. This affects the function parser_parse_source of the file

Common Vulnerabilities and Exposures

JerryScript 2.2.0 parser_emit_cbc_backward_branch assertion

A vulnerability has been found in JerryScript 2.2.0 and classified as critical. There is no information about possible countermeasures known.

Common Vulnerabilities and Exposures

Apport prior 2.20.11-0ubuntu57 Report File denial of service

A vulnerability was found in Apport and classified as problematic. This issue affects an unknown part of the component Report

Common Vulnerabilities and Exposures

JerryScript 2.4.0 ecma-helpers.c ecma_is_lexical_environment use after free

A vulnerability was found in JerryScript 2.4.0. It has been classified as critical. Affected is the function ecma_is_lexical_environment of the

Common Vulnerabilities and Exposures

JerryScript 2.4.0 js-lexer.c lexer_parse_number heap-based overflow

A vulnerability was found in JerryScript 2.4.0. It has been declared as critical. Affected by this vulnerability is the function

Common Vulnerabilities and Exposures

JerryScript 2.4.0 main-utils.c main_print_unhandled_exception memory corruption

A vulnerability was found in JerryScript 2.4.0. It has been rated as critical. Affected by this issue is the function