1177 matches found
CVE-2024-57955
Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-57955
Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-57955
Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-57955
Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2025-5813 · Gallery · Gallery
Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: The issue is related to an arbitrary write vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality. There is no...
CVE-2024-57955: Out-of-bounds Write
Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An arbitrary write vulnerability exists in the Huawei HarmonyOS Gallery module, which can be exploited by an attacker to compromise confidentiality...
CVE-2022-23561
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...
CVE-2022-36991
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path o...
CVE-2024-23827
Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the...
CVE-2024-46974 GPU DDK - Arbitrary write of read-only dmabuf
Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers...
CVE-2024-46974 GPU DDK - Arbitrary write of read-only dmabuf
Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers...
SUSE CVE-2024-12087
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the --inc-recursive option, a lack of proper...
CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...
UBUNTU-CVE-2024-12425
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...
PT-2025-3112
Name of the Vulnerable Software and Affected Versions SUNIX Multi I/O Card version 10.1.0.0 Description An issue in the snxpcamd.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. This enables attackers to manipulate the system, posing...
PT-2025-3111
Name of the Vulnerable Software and Affected Versions Asus GPU Tweak II Program Driver version 1.0.0.0 Description The issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. Recommendations...
CVE-2024-55411: Incorrect Permission Assignment for Critical Resource
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
ASUS System Analysis IO 安全漏洞
ASUS System Analysis IO is a module in a diagnostic software from Asus China. A security vulnerability exists in ASUS System Analysis IO version 1.0.0, which stems from a problem with the AsusSAIO.sys component that allows an attacker to perform arbitrary read and write operations by supplying a...
PT-2025-37973
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a vulnerability in the atmtcp subsystem that could allow for arbitrary write access. Specifically, the issue resides within the atmtcp recv control function and...