Aggregator

A vulnerability, which was classified as critical, was found in Rob Flynn Gaim. Affected is the function parsing. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2005-1261. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Michael Sandrof IrcII 4.4.7. Affected is an unknown function of the component DCC Chat Handler. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2000-0183. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Apache Struts up to 2.3.8. Affected by this vulnerability is the function getClass of the component ParametersInterceptor. The manipulation of the argument class leads to denial of service. This vulnerability is known as CVE-2014-0094. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Sun Solaris 7/8/9. It has been classified as critical. This affects the function font.alias of the component Xsun Server. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2004-0083. The attack can only be done within the local network. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Oracle Enterprise Manager Base Platform 13.3.0.0/13.4.0.0. It has been declared as critical. This vulnerability affects unknown code of the component Reporting Framework. The manipulation leads to improper input validation. This vulnerability was named CVE-2018-11776. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in XFree86 up to 4.3.0. It has been classified as critical. Affected is the function ReadFontAlias. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2004-0083. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in InvoicePlane up to 1.6.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /invoices/view. The manipulation leads to session expiration. This vulnerability is handled as CVE-2024-12667. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A vulnerability was found in Microsoft Windows. It has been declared as critical. This vulnerability affects unknown code of the component Kernel-Mode Driver. The manipulation leads to untrusted pointer dereference. This vulnerability was named CVE-2024-35250. Attacking locally is a requirement. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

2024年12月09日-2024年12月15日本周漏洞态势研判情况本周信息安全漏洞威胁整体评价级别为中。国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞295个，其中高危漏洞1

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

11月│月报 谛听工控安全月报上线了，工信部的最新政策，11月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

11月│月报 谛听工控安全月报上线了，工信部的最新政策，11月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

11月│月报 谛听工控安全月报上线了，工信部的最新政策，11月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

11月│月报 谛听工控安全月报上线了，工信部的最新政策，11月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!