28151 matches found
CVE-2024-49563
Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...
CVE-2025-22398
Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root...
Dell Unity operating system command injection vulnerability
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
Dell Unity operating system command injection vulnerability
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
Dell Unity operating system command injection vulnerability
Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from an OS command execution vulnerability that can be exploited by an attacker to submit a special request to execute arbitrary commands...
Dell Unity operating system command injection vulnerability
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
Dell Unity operating system command injection vulnerability
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
CVE-2024-26812 affecting package kernel for versions less than 5.15.176.3-3
CVE-2024-26812 affecting package kernel for versions less than 5.15.176.3-3. A patched version of the package is available...
CVE-2025-2857
A critical sandbox escape vulnerability exists in Mozilla Firefox on Windows due to an issue in the IPC code . A compromised child process can trick the parent process into returning an unintentionally powerful handle , allowing an attacker to escape the sandbox. The original vulnerability was ex...
CVE-2025-2857 Incorrect handle could lead to sandbox escapes
Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was...
CVE-2025-2857 Incorrect handle could lead to sandbox escapes
Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was...
Siemens SCALANCE LPE9403 Operating System Command Injection Vulnerability (CNVD-2025-09962)
Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The Siemens SCALANCE LPE9403 6GK5998-3GS00-2AC2 suffers from an operating system command injection vulnerability that...
Security Vulnerability fixed in Firefox 136.0.4, Firefox ESR 128.8.1, Firefox ESR 115.21.1 — Mozilla
Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was...
Linux nfsd4_copy Heap Buffer Overflow DoS
The vulnerability of the nfsd4copy function in the fs/nfsd/nfs4proc.c module of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux DRM/AMD DoS
The vulnerability of DRM/AMD kernel components in the Linux operating system is related to the assignment of the NULL pointer in the amdgpuatifcall function. Exploiting this vulnerability can allow a hacker to trigger a service failure...
Linux DRM AMD Display Kernel DoS
The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux kernel be2net DoS
The vulnerability of the be2net kernel component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...
remoteproc DoS
The vulnerability of the remoteproc component in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
Ceph Kernel DoS
The vulnerability of the ceph kernel component in the Linux operating system is related to improper input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...