CVE-2023-40898

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...

WAVLINK WL-WNJ575A3 命令注入漏洞

WAVLINK WL-WNJ575A3 is a wireless network signal extender from China RuiYin Technology WAVLINK. The WAVLINK WL-WNJ575A3 suffers from a command injection vulnerability that originates from an application failing to properly filter construct command special characters, commands, etc. The...

PT-2024-12816 · Mariadb Foundation +1 · Mariadb +1

Name of the Vulnerable Software and Affected Versions: MariaDB version 10.5 Description: Insecure permissions in the sys exec function of MariaDB allow authenticated attackers to execute arbitrary commands with elevated privileges. This issue is disputed by the MariaDB Foundation because no...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

buildah security update

runc 1:1.1.4-1.0.1 - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589...

CVE-2023-35298

CVE-2023-35298 is a HTTP.sys Denial of Service vulnerability affecting Windows, with the HTTP.sys component as the vulnerable element. The provided documents identify the vulnerability as a DoS risk (CVSS v3.1 base score 7.5, HIGH) and confirm exposure via network without user interaction. Public...

Microsoft Windows VOLSNAP.SYS 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows VOLSNAP.SYS. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected: Window...

Buffer overflow

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

The vulnerability of the drivers zam64.sys and zam32.sys in the MalwareFox AntiMalware antivirus software allows a hacker to gain increased privileges.

The vulnerability of the zam64.sys and zam32.sys drivers in the MalwareFox AntiMalware software is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to enhance their privileges...

The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, allows a malicious actor to cause a service failure.

The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Fedora: Security Advisory for rust-nettle-sys (FEDORA-2023-1d0d71b6aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : rust-buffered-reader / rust-nettle / rust-nettle-sys / etc (2023-1d0d71b6aa)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-1d0d71b6aa advisory. - Update the sequoia-openpgp crate to version 1.16.0. - Update the nettle crate to version 7.3.0. - Update the nettle-sys crate to version 2.2.0. - Update th...

CVE-2023-2873

A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x80800043 in the library filppd.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Local access is required to...

PT-2023-21936 · Unknown · Escan Antivirus

Name of the Vulnerable Software and Affected Versions: eScan Antivirus version 22.0.1400.2443 Description: A problematic vulnerability was found in the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It...

PT-2023-2922 · Unknown · Twister Antivirus

Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8 Description: The issue is related to a buffer overflow in the filppd.sys file of the IoControlCode Handler in Twister Antivirus, leading to memory corruption. This can allow an attacker to impact the confidentialit...

USN-6088-2: runC vulnerabilities

USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue to escalate privileges. CVE-2019-19921...

USN-6088-2 runc vulnerabilities

USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue to escalate privileges. CVE-2019-19921...

Malicious code in sys-scikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a43a0e5d5c9f583954d954b1a27badf0220728b50a05983479b1e2e212e8c16e The OpenSSF Package Analysis project identified 'sys-scikit-learn' @ 17.8.18 pypi as malicious. It is considered malicious because: - The packag...

Malicious code in sys-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1ae15b4cab934fe2bdb8472ceb8f00edfd582688a810321e7e4814ca66cbe98 The OpenSSF Package Analysis project identified 'sys-selenium' @ 9.1.9 pypi as malicious. It is considered malicious because: - The package...