28161 matches found
Dell SmartFabric OS10 command injection vulnerability
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. A command injection vulnerability exists in Dell SmartFabric...
Dell SmartFabric OS10 security vulnerabilities
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. A security vulnerability exists in Dell SmartFabric OS10 that originates from an unwanted privilege execution that can be exploited by an attacker to cause an elevation of privilege...
Dell SmartFabric OS10 command injection vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a command injection vulnerability that originates from improper neutralization of special elements in a command, which can be exploited by an attacker to cause a command to be...
Mattermost Desktop App security vulnerabilities
Mattermost Desktop App is a cross-platform desktop collaboration tool based on the Electron framework, supporting Windows, macOS and Linux systems, designed for team collaboration. A privilege misconfiguration vulnerability exists in Mattermost Desktop App. The vulnerability stems from declaring...
AMD DRI Buffer Overflow DoS
Vulnerability of the CalculateBytePerPixelAndBlockSizes function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2core/dml2coredcn4calcs.c file – The driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems has a vulnerability due to...
Windows RRAS Routing Remote Access Code Execution
The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Zoom video conferencing macOS Installer Privilege Escalation
The vulnerability of the software installer for Zoom video conferencing on macOS operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to gain unauthorized access...
CVE-2024-12019
CVE-2024-12019 describes an arbitrary file read flaw in the LogicalDOC document API. An authenticated attacker who has at least read and download privileges on an existing document can exploit the API to read files on the underlying OS, potentially accessing any file within the privileges of the ...
CVE-2024-54449 Remote Code Execution (RCE) via Arbitrary File Write In Document API
The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with ‘read’ and ‘writ...
CVE-2024-26006
An improper neutralization of input during web page Generation vulnerability CWE-79 in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote...
PT-2025-11291
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account...
LogicalDOC code injection vulnerability
LogicalDOC is the United States LogicalDOC company a set of document management system developed using Java technology . The system has Lucene full-text search index and automatic import and other functions. A security vulnerability exists in LogicalDOC, which stems from an automated scripting...
Juniper Networks Junos OS Kernel Spatial Partitioning Code Execution
The vulnerability of Juniper Networks Junos OS’s kernel is related to insufficient spatial partitioning. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted file...
Compatibility Subsystem Kernel Execution Arbitrary Code
The vulnerability in the kernel of the compatibility subsystem for running Linux applications, namely Windows Subsystem for Linux WSL2 on Windows operating systems, involves a pointer manipulation issue. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Windows Common Log File System Driver Privilege Escalation
The vulnerability of the Windows Common Log File System Driver in the operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...
Local Security Authority Privilege Escalation
The vulnerability of the Local Security Authority LSA in Windows operating systems, which is responsible for verifying identities and managing user policies, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3
CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...
CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1
CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...