38662 matches found
kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
A vulnerability was found in the Linux kernel's IPv6 handling in the xfrm6getsaddr function, where the issue occurs when ip6dstidev returns NULL, leading to a null pointer dereference and resulting in a general protection fault...
kernel: tunnels: fix out of bounds access when building IPv6 PMTU error
A flaw was found in the Linux kernel. This issue occurs due to the improper handling of non-linear skbs socket buffers when calculating checksums for ICMPv6 PMTU error messages. This vulnerability can lead to out-of-bounds access, potentially causing memory corruption or crashes...
CVE-2024-38267
An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50ABOM.8C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread...
kernel: netfilter: tproxy: bail out if IP has been disabled on the device
In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 1 PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range...
python: incorrect IPv4 and IPv6 private ranges
A flaw was found in Python. The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. Due to this issue, it is possible that values will not be returned in accordance with the latest information from th...
kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
A vulnerability was found in the Linux kernel's IPv6 handling in the xfrm6getsaddr function, where the issue occurs when ip6dstidev returns NULL, leading to a null pointer dereference and resulting in a general protection fault...
September 24, 2024—KB5043131 (OS Build 19045.4957) Preview
None None...
D-Link DAR-7000 Operating System Command Injection Vulnerability
D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. An OS command injection vulnerability exists in the D-Link DAR-7000 20240912 and earlier versions, which stems from the parameter host in the file /view/DBManage/BackupServercommit.php that can lead to OS command...
The vulnerability of the add_option() function in the ISC DHCP configuration program allows a attacker to cause a service failure.
The vulnerability of the addoption function in the ISC DHCP configuration program is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2024-45229
The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can ...
Everything you need to know about VPN tracking
A VPN Virtual Private Network adds privacy and security to your browsing. But does this make your internet…...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2024-27795
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...
CVE-2024-27795
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...
Command Execution Vulnerability in T+
T+ is a new Internet-based business management software. A command execution vulnerability exists in Changjitong T+, which can be exploited by an attacker to execute arbitrary commands on the target server...
The vulnerability of the AVG Internet Security antivirus protection lies in the use of dangerous methods or functions, which allow attackers to enhance their privileges.
The vulnerability of the AVG Internet Security antivirus protection lies in the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates from a camera extension that may be able to access the Internet...
CVE-2024-27795
CVE-2024-27795 affects macOS Sequoia 15 where a permissions issue could allow a camera extension to access the Internet. Apple fixed this with additional restrictions in Sequoia 15; multiple sources consistently describe it as a permissions restriction issue resolved by a patch. Connected documen...
