17463 matches found
CVE-2024-49564
Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...
CVE-2024-49565
Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...
CVE-2024-49565
Dell Unity is affected by CVE-2024-49565: versions 5.4 and earlier suffer an OS Command Injection due to improper neutralization of special elements. A low-privileged attacker with local access could potentially execute arbitrary OS commands and achieve privilege escalation. Multiple connected so...
CVE-2024-49565
Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...
Metabase 后置链接漏洞
Metabase is an open source data analytics platform from the US-based Metabase, Inc. A backlink vulnerability exists in Metabase versions prior to v0.52.16.4, prior to v1.52.16.4, prior to v0.53.8, and prior to v1.53.8, which stems from a bypass of the GeoJson endpoint local link access protection...
HDF5 安全漏洞
HDF5 is an HDF open source library. A security vulnerability exists in HDF5 1.14.6 and earlier versions, which stems from a heap buffer overflow in the H5Omsgflush function and requires local access...
PT-2025-13548
Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A heap-based buffer overflow issue has been identified, affecting the H5O msg flush function in the file src/H5Omessage.c. The manipulation of the oh argument leads to this issue. The attack requires loca...
PT-2025-13550
Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A problematic vulnerability has been found in HDF5, affecting the function H5FS sinfo Srialize Sct cb of the file src/H5FScache.c. The manipulation of the argument sect leads to a heap-based buffer...
PT-2025-13566
Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A problematic issue has been found in HDF5, affecting the function H5F addr encode len of the file src/H5Fint.c. The manipulation of the argument pp leads to a heap-based buffer overflow. This issue...
HDF5 安全漏洞
HDF5 is an HDF open source library. A security vulnerability exists in HDF5 1.14.6 and earlier versions, which stems from a null pointer dereference in the H5Ocachechkserialize function that requires local access...
CVE-2025-2722
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsfpropsettingscollectva. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Local access is required to approach this attack. The...
PT-2025-13426 · Dell · Dell Unity
Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...
PT-2025-13424 · Dell · Dell Unity
Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...
AZL-59270 CVE-2025-31160 affecting package atop for versions less than 2.6.0-10
atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...
CVE-2025-2722
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid because pnparam is an input-output parameter...
CVE-2025-2722
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid because pnparam is an input-output parameter...
UBUNTU-CVE-2025-2722
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsfpropsettingscollectva. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Local access is required to approach this attack. The...
CVE-2025-2722
CVE-2025-2722 corresponds to a vulnerability in GNOME libgsf up to 1.14.53 affecting gsf_prop_settings_collect_va, where manipulation of n_alloced_params leads to a heap-based buffer overflow. Exploitation requires local access; documentation across Red Hat, SUSE, and Ubuntu references the issue,...
