CVE-2024-40890

UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an authenticated attacker to execute operating system OS commands on an affected device by sending a crafte...

CVE-2024-40891

UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an authenticated attacker to execute operating system OS commands on an affected device via Telnet...

iCloud macOS Code Execution

The vulnerability of the iCloud service for macOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

AirPlay DoS

The vulnerability of the AirPlay technology’s implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to data type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafte...

Sips DoS

The vulnerability of the command-line image editing tool Sips in macOS operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

FaceTime macOS Disclosure

The vulnerability of the FaceTime video/audio call technology in macOS operating systems lies in the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to disclose protected information...

Photos storage service Disclosure

The vulnerability of Photos storage in macOS operating systems is related to the exposure of information through mismatches. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

AirPlay Code Execution

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Login Window Data Compromise

The vulnerability of the Login Window component in operating systems running macOS is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

Cisco Secure Email and Web Manager SNMP Polling Information Disclosure (cisco-sa-esa-sma-wsa-snmp-inf-FqPvL8sX)

According to its self-reported version, Cisco Secure Email and Web Manager is affected by a vulnerability. - A vulnerability in SNMP polling for Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain...

CVE-2025-22867

Building a Go module containing CGO on Darwin can lead to arbitrary code execution when utilizing the Apple version of ld . This vulnerability is caused by the use of special values such as @executable_path, @loader_path, or @rpath within a "#cgo LDFLAGS" directive. The issue specifically affecte...

CVE-2021-28494

In Arista's MOS Metamako Operating System software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases...

CVE-2022-43971

An arbitrary code exection vulnerability exists in Linksys WUMC710 Wireless-AC Universal Media Connector with firmware = 1.0.02 build3. The dosetNTP function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator...

Windows NTLMv2 Pass-the-hash

The vulnerability of the NTLMv2 authentication protocol for Windows operating systems is related to the disclosure of hashes due to improper external manipulation of the name or file. Exploiting this vulnerability can allow a remote attacker to execute a Pass-the-hash attack...

iCloud Photo Library macOS Bypass Security

The vulnerability of iCloud Photo Library on macOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a remote attacker to bypass security restrictions...

CVE-2022-1440

Command Injection vulnerability in [email protected] in GitHub repository yarkeev/git-interface prior to 2.1.2. If both are provided by user input, then the use of a --upload-pack command-line argument feature of git is also supported for git clone, which would then allow for any operating syst...

CVE-2022-33278

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity...

CVE-2022-37903

A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system...

CVE-2022-4002

A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request...

CVE-2022-48582

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...