16964 matches found
USN-7553-6 linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file system; - JFFS2 file system; - JFS file...
CyberData 011209: Intercom SQL Injection Vulnerability
CyberData 011209 Intercom is an emergency call appliance from CyberData Corporation. CyberData 011209 Intercom suffers from a SQL injection vulnerability that stems from susceptibility to blind SQL injection attacks...
PT-2025-24438
Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.9.11 Description The issue concerns the Sandbox container in FastGPT, which has insufficient isolation and inadequate restrictions on code execution. This allows attackers to escape the intended sandbox boundaries b...
RT-Thread buffer error vulnerability
RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A buffer error vulnerability exists in RT-Thread version 5.1.0, which stems from memory corruption due to the operation of the parameter from in the file rt-thread/components/lwp/lwpsyscall.c. The...
Linux RPC svc_rqst_free Heap Buffer Overflow DoS
The vulnerability of the svcrqstfree function in the net/sunrpc/svc.c module of the RPC protocol implementation in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-26691 telephony_call_manager has an improper preservation of permissions vulnerability
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission...
CVE-2025-26691
OpenHarmony has a local information-leak vulnerability CVE-2025-26691 affecting v5.0.3 and earlier. The issue is triggered by a flaw in permission handling (reported as improper preservation of permissions in the telephony_call_manager context), enabling a local attacker to leak confidential data...
Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam
India's Central Bureau of Investigation CBI has revealed that it has arrested six individuals and dismantled two illegal call centers that were found to be engaging in a sophisticated transnational tech support scam targeting Japanese citizens. The law enforcement agency said it conducted...
Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam
India's Central Bureau of Investigation CBI has revealed that it has arrested six individuals and dismantled two illegal call centers that were found to be engaging in a sophisticated transnational tech support scam targeting Japanese citizens. The law enforcement agency said it conducted...
CVE-2024-53026
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...
CVE-2024-53013
Memory corruption may occur while processing voice call registration with user...
PT-2025-31376
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The do change type function previously allowed operations on unmounted or improperly owned mounts. This issue has been resolved by ensuring that propagation settings can only be modified...
SAP Landscape Transformation Functional Module
The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation SLT is related to improper code generation. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and...
CVE-2024-53013
Memory corruption may occur while processing voice call registration with user...
CVE-2024-53026
CVE-2024-53026 describes an information-disclosure vulnerability triggered by receiving an invalid RTCP packet during a VoLTE/VoWiFi IMS call. Connected sources associate this with Qualcomm chipsets and note public advisories/patches refer to this issue; however, concrete technical details about ...
CVE-2024-53026 Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call...
CVE-2024-53013 Buffer Copy Without Checking Size of Input in Audio
Memory corruption may occur while processing voice call registration with user...
CVE-2024-53013
CVE-2024-53013 corresponds to a memory corruption issue in Qualcomm chipsets during processing of voice call registrations. The vulnerability affects the voice-call registration path and is described as memory corruption with an impact profile including confidentiality Low, integrity High, availa...
