CVE-2024-45577

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

CVE-2025-43926

Znuny vulnerability CVE-2025-43926 affects versions 6.5.14 and 7.x up to 7.1.6. The issue arises from Custom AJAX calls to AgentPreferences UpdateAJAX, allowing arbitrary keys to be set as user preferences. When GetUserData fetches data, these keys/values are passed to other function calls and ma...

CVE-2025-43926

An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetching user data via GetUserData, these keys and values are retrieved and given as a whole to other...

CVE-2025-43926

An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetching user data via GetUserData, these keys and values are retrieved and given as a whole to other...

TeleMessage archiving backend 安全漏洞

TeleMessage archiving backend is an enterprise-grade communications archiving platform from TeleMessage Israel that supports SMS/voice/social media compliant storage and auditing. A security vulnerability exists in TeleMessage archiving backend version 2025-05-05 and earlier, which stems from API...

Cisco IOS XE Software Model-Driven Programmability Authorization Bypass Vulnerability

A vulnerability in the Network Configuration Access Control Module NACM of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior caus...

CVE-2025-32398

A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet...

SUSE CVE-2024-58237

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...

Configure Audit Rules for File Access Failures

System calls, such as open, truncate, ftruncate, create and openat, are audited and monitored. If the -EACCES or -EPERM error is returned, you lack the permission to access the files. In this case, audit logs need to be recorded. File access failures due to a lack of proper permissions are common...

Configure Audit Rules for File Deletion

Generally, it is highly risky to delete files in the OS. Misoperations by administrators or attacks may cause severe system faults. You are advised to audit and monitor system calls, such as rename, unlink, unlinkat, and renameat, and record deletion operation logs. Deleting system or service fil...

jinja2: Jinja has a sandbox breakout through indirect reference to format method

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...

CVE-2024-45583

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45583

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45579

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45577

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

CVE-2024-45579

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-49830

CVE-2024-49830 describes memory corruption that occurs when processing an IOCTL call to set mixer controls on Qualcomm chipsets. The vulnerability affects the mixer-control handling path (IOCTL processing) and is supported by multiple feeds (NVD/RH/CVE list) with CVSSv3.1 base scores indicating h...

CVE-2024-45583 Use After Free in Secure Processor

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45583

The CVE-2024-45583 issue is described as memory corruption when handling multiple IOCTL calls from user space to operate DMA operations on Qualcomm chipsets. The vulnerability centers on IOCTL processing that enables DMA-related operations and is tied to memory corruption as the primary impact. M...

CVE-2024-45579 Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...