CVE-2024-21971

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service...

Broadcom SANnav security vulnerabilities

Broadcom SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Broadcom SANnav that stems from CalInvocationHandler logging sensitive information in plaintext. An authenticated, local attacker could use this vulnerability to view sensitive...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0473

Updates of 'libtasn1' packages of Photon OS have been released...

CVE-2023-47218

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...

CVE-2024-37364

Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...

mySCADA myPRO operating system command injection vulnerability

mySCADA myPRO is a professional HMI/SCADA system from mySCADA designed for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO that originates from not properly validating input. An attacker could exploit this...

Face Gallery Disclosure

The vulnerability of the Face Gallery component in operating systems such as watchOS, iOS, and iPadOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Active Directory Domain Services DoS

The vulnerability of the application programming interface of the Active Directory Domain Services service on the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Data Compromise Component

The vulnerability of the Accessibility component in operating systems such as iOS and iPadOS is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Resilient File System Deduplication Service Privilege Escalation

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Web Inspector Arbitrary Command Execution

The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2025-7040 · Myscada · Myscada Mypro Manager

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO Manager affected versions not specified Description: The administrative web interface of mySCADA myPRO Manager can be accessed without authentication, which could allow an unauthorized attacker to retrieve sensitive information...

PT-2025-6949

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist OS Recovery versions prior to 5.5.13.1 Description: The issue concerns a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary fil...

IOMobileFrameBuffer Data Compromise

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOS, watchOS, iPadOS, and iOS lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...

Image Handler DoS

The vulnerability of the Image Handler component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Accounts Component Unauthorized Access

The vulnerability of the Accounts component in MacOS, iOS, and iPadOS is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

AppleMobileFileIntegrity Unauthorized Access

The vulnerability of the AppleMobileFileIntegrity component in the MacOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-37020

Sequence of processor instructions leads to unexpected behavior in the IntelR DSA V1.0 for some IntelR XeonR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-21971

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service...