CVE-2024-12856

The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this...

CVE-2024-12856

CVE-2024-12856 affects Four-Faith router models F3x24 and F3x36. The OS command-injection vulnerability exists in the adjust_sys_time functionality exposed via /apply.cgi, allowing an authenticated user to modify system time and execute arbitrary OS commands over HTTP. In firmware v2.0, default c...

CVE-2024-56573

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdlineptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed whe...

CVE-2024-56555

In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binderaddfreezework In binderaddfreezework we iterate over the proc-nodes with the proc-innerlock held. However, this lock is temporarily dropped to acquire the node-lock first lock nesting order. This can race...

CVE-2024-52906

IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service...

IBM AIX和IBM Vios 输入验证错误漏洞

IBM AIX and IBM Vios are both products of the International Business Machines IBM Corporation.IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture.IBM Vios is part of the PowerVm® Editions hardware feature. IBM Vios is part of the PowerVm® Editions...

IBM AIX 竞争条件问题漏洞

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. IBM AIX has a security vulnerability that can be exploited by attackers to cause a denial of service...

Google Android elevation of privilege vulnerability (CNVD-2025-02971)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

The vulnerability of the carl9170 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the carl9170 component in the Linux operating system is related to a memory corruption in the carl9170txrelease function. Exploiting this vulnerability can allow an attacker to cause a service failure...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

Unspecified vulnerability in Linux kernel (CNVD-2024-4920825)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel has a security vulnerability that can be exploited by attackers to cause resource exhaustion...

Unspecified vulnerability in Linux kernel (CNVD-2024-4921023)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel has a security vulnerability that can be exploited by attackers to cause resource exhaustion...

PT-2024-17790 · Global Wisdom +1 · Anchor +1

Name of the Vulnerable Software and Affected Versions: ANCHOR from Global Wisdom Software affected versions not specified Description: The underlying Windows OS of the ANCHOR product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in...

Rizin 操作系统命令注入漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binary files, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. An operating system command injection...

Important Photon OS Security Update - PHSA-2024-5.0-91-0432

Updates of 'rubygem-nokogiri' packages of Photon OS have been released...

IBM Security Directory Integrator 操作系统命令注入漏洞

IBM Security Directory Integrator is an integrated development environment and runtime service from International Business Machines IBM. IBM Security Directory Integrator suffers from an operating system command injection vulnerability that stems from the application's failure to properly filter...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-1587827)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS. An attacker can exploit the vulnerability to affect availability...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-0225734)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS has a security vulnerability that can be exploited by attackers to cause power consumption to be affected...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15.1, which originates from an application that may be able to read arbitrary files...

Huawei HarmonyOS Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in Huawei HarmonyOS. The vulnerability stems from an out-of-bounds access vulnerability in the DASH module playback. A...