Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS...

A vulnerability in the riscv component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure.

The vulnerability in the riscv component of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Android elevation of privilege vulnerability (CNVD-2024-47707)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Siemens SIPORT Elevation of Privilege Vulnerability

SIPORT is a comprehensive, modular and reliable system for access control and time management in the Monitoring Access Suite. An elevation of privilege vulnerability exists in Siemens SIPORT, which can be exploited by a local attacker with an unprivileged account to overwrite or modify the servic...

Binary Vulnerability in Chart Viewer Program of Unisys Software Technology Ltd.

Unisys Software Technology Co., Ltd. is a leading manufacturer of operating systems in China. A binary vulnerability exists in the Unisys Software Technologies Ltd. viewing program, which can be exploited by attackers to cause a denial of service...

AI Call Assistant & Screener 安全漏洞

AI Call Assistant & Screener is a call screener and blocker from Call Assistant, Inc. AI Call Assistant & Screener version 1.174 has a security vulnerability that originates from an attacker being able to make a phone call without user interaction by sending a crafted intent via the...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a pop-up window in the vpn module indicating no application attribution. An attacker...

IBM Concert Cross-Site Request Forgery Vulnerability

IBM Concert is an enterprise collaboration platform from IBM. IBM Concert suffers from a cross-site request forgery vulnerability vulnerability due to a failure to set the SameSite attribute for cookies. An attacker could exploit this vulnerability to conduct a cross-site request forgery CSRF...

Cisco Secure Firewall Management Center Command Execution Vulnerability

Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco. A command execution vulnerability exists in Cisco Secure Firewall Management Center that stems from insufficient input validation of certain HTTP request parameters sent to the web management...

Google Android elevation of privilege vulnerability (CNVD-2025-03021)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a flaw in the ABL component that can be exploited by an attacker to escalate privileges...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2025-16662)

JetBrains YouTrack is a project management tool, developed by JetBrains, supporting cloud hosting and local deployment, providing task management, team collaboration, time tracking and other features for software development, human resources and other scenarios. JetBrains YouTrack suffers from a...

Google Chrome Code Execution Vulnerability (CNVD-2024-48385)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A code execution vulnerability exists in Google Chrome, which is caused by type obfuscation in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Chrome Security Bypass Vulnerability (CNVD-2024-48384)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2024-41983)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Cisco Firepower Threat Defense 安全漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from Cisco USA. A security vulnerability exists in Cisco Firepower Threat Defense. An attacker exploited the vulnerability to cause a denial of service on the system...

PT-2024-9128 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A logic error in the AnyConnect firewall could allow an unauthenticated,...

PT-2024-7501 · Cisco · Cisco Adaptive Security Device Manager +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the TLS cryptography functionality could allow an...

Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker exploiting this vulnerability could cause MySQL Server to hang or crash...

Rails 安全漏洞

Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. A security vulnerability exists in Rails. An attacker exploited the vulnerability to cause a denial of service on the system...

Adobe Commerce Competitive Conditions Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A competitive condition vulnerability exists in Adobe Commerce that could be exploited by an attacker to cause a security feature bypass...