Google Pixel 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 for Google Pixel/Nexus devices, which can be...

The vulnerability of the clk-mt2701 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the clk-mt2701 component in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Manager component in the Wowza Streaming Engine server software allows a hacker to gain access and delete directories.

The vulnerability of the Manager component in the Wowza Streaming Engine server software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain access and delete directories, provided that the target...

The vulnerability of the fbdev component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fbdev component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the hci_event component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential information.

The vulnerability of the hcievent component in the Linux operating system’s kernel is related to the disclosure of information within the hciiocaparequestevt function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

CVE-2024-52769

An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-52769

An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

The vulnerability of DRM/LIMA components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the DRM/Lima components in the Linux operating system is related to a memory leak in the limaheapalloc function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-48069

A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges...

CVE-2024-48069

Weaver E-cology (Weaver E-cology) is affected, specifically version 9.. The vulnerability stems from race conditions that allow bypassing security controls, enabling the upload of malicious files and potential control of server privileges. A related remote code execution issue is reported in the ...

The vulnerability of the ttpci component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ttpci component in the Linux operating system’s kernel is related to a memory leak in the budgetavattach function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs component in Linux operating systems is related to read misses beyond the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the target component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the target component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

CVE-2024-48440

Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered to contain a command injection vulnerability via the component atcommand.asp...

The vulnerability of the tun component in the Linux operating system’s kernel allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Linux kernel’s tun component is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures using the HTTP protocol...

GHSA-37GM-H5WR-PF25 Path traversal in redaxo

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

ROS-20241009-03

A vulnerability in the ksmbd component of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the vcap component of the Linux operating system kernel is related to memory usage after...