漏洞信息
It was discovered that HarfBuzz incorrectly handled memory.
It was discovered that HarfBuzz incorrectly handled certain length checks.
漏洞危害
A re ...
閱讀全文
漏洞信息
Oracle Enterprise Linux has released security update for kernel to fix the vulnerabilities.
Affected Products:
Oracle Linux 6
漏洞危害
net/ipv4/tcp_i ...
閱讀全文
漏洞信息
The java-1.6.0-openjdk packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Java Software Development Kit.
Security Fix(es): ...
閱讀全文
近日,國(guó)家信息安全漏洞共享平臺(tái)(CNVD)收錄了zabbix存在的SQL注入漏洞(CNVD-2016-06408)。攻擊者利用漏洞無(wú)需授權(quán)登錄即可控制zabbix管理系統(tǒng),或通過(guò)script等功能直接獲取zabbix服務(wù)器的操作權(quán)限,進(jìn)而有可能危害到用戶單位整個(gè)網(wǎng)絡(luò)系統(tǒng)的運(yùn)行安全。由于zabbix服 ...
閱讀全文
漏洞描述
Apache Struts2在使用REST插件的情況下,攻擊者使用REST調(diào)用惡意表達(dá)式可以遠(yuǎn)程執(zhí)行代碼。該漏洞編號(hào)為CVE-2016-4438,定名S2-037。該漏洞和S2-033漏洞觸發(fā)流程基本一致,都是在ActionMapping中methodName帶入到OGNL表達(dá)式中執(zhí)行,從 ...
閱讀全文