ROS-20250117-04

Visual Studio Code source code editor vulnerability is related to failure to take measures to neutralize the special elements used in the operating system command. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

January 14, 2025—KB5049981 (OS Builds 19044.5371 and 19045.5371) - EXPIRED

None None...

NetVision Information airPASS 操作系统命令注入漏洞

NetVision Information airPASS is an application from China-based NetVision Information. NetVision Information airPASS suffers from an operating system command injection vulnerability that stems from vulnerability to operating system command injection attacks, which could allow a remote attacker...

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in its inability to remove special elements used in the basic operating system, allowing attackers to execute arbitrary commands.

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures taken to neutralize special elements used in the basic operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-02244)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A security vulnerability exists in Huawei HarmonyOS and...

Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-02246)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI have a security vulnerability...

The vulnerability of the Digital Media component of Microsoft Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Digital Media component of Microsoft Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by...

The vulnerability of the command line of Juniper Networks Junos OS models SRX1500, SRX4100, and SRX4200, related to insufficient handling of exceptional states, allows a attacker to trigger a service failure.

The vulnerability of the command line interface of Juniper Networks Junos OS models SRX1500, SRX4100, and SRX4200 is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0449

Updates of 'linux', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by sending...

CVE-2024-54470

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-40854

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination...

CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...

CVE-2024-57022

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg...

CVE-2024-57018

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...

CVE-2024-57020

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg...

CVE-2024-54031

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struct nftsetext results in unaligned atomic read: 72.130109 Unable to handle kernel paging request at virtual address ffff0000c2bb708c...