mySCADA myPRO Command Validation Code Execution

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system...

Apple macOS Ventura security vulnerabilities

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from the fact that applications may be able to break out of its sandbox...

mySCADA myPRO OS Command Injection Vulnerability (CNVD-2023-38197)

mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO 8.26.0 and earlier versions, which can be exploited by an...

Altenergy Power System Control Software: Operating System Command Injection Vulnerability

Altenergy Power System Control Software is microinverter control software from Altenergy Power System. A security vulnerability exists in AlAltenergy Power System Control Software version C1.2.5, which originates from an operating system command injection vulnerability...

SUSE CVE-2011-1344

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 CDMA; and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag,...

QTS QuTS Code Execution

The vulnerability of the QTS and QuTS operating systems is related to the possibility of executing commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows NTLM. An attacker can exploit the vulnerability to elevate privileges...

Apple iOS Competition Condition Vulnerabilities

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Apple iOS Security Vulnerabilities

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Windows DWM Core Library Privilege Escalation

The vulnerability of the Windows DWM Core Library in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Windows Secure Channel DoS

The vulnerability of the Windows Secure Channel component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Zephyr resource management error vulnerability

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr version 3.1 and earlier versions. An attacker exploited the vulnerability to trigger a denial-of-service exploit...

Microsoft Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Azure Real Time Operating System security vulnerabilities

Microsoft Azure Real Time Operating System Azure RTOS is an embedded development kit from Microsoft Corporation USA that includes a small but powerful operating system that delivers reliable, ultra-fast performance for resource-constrained devices. A security vulnerability exists in the Microsoft...

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows operating system’s print spooler is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

QTS Data Compromise

The vulnerability of the QTS operating system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of information...

QTS Path Traversal Data Compromise

The vulnerability of the QTS operating system is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of information...

QTS Code Execution

The vulnerability of the QTS operating system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Container Isolation FS Filter driver Privilege Escalation

The vulnerability of the Windows Container Isolation FS Filter driver in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...