PT-2024-17790 · Global Wisdom +1 · Anchor +1

Name of the Vulnerable Software and Affected Versions: ANCHOR from Global Wisdom Software affected versions not specified Description: The underlying Windows OS of the ANCHOR product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in...

Important Photon OS Security Update - PHSA-2024-5.0-91-0432

Updates of 'rubygem-nokogiri' packages of Photon OS have been released...

IBM Security Directory Integrator: Operating System Command Injection Vulnerability

IBM Security Directory Integrator is an integrated development environment and runtime service from International Business Machines IBM. IBM Security Directory Integrator suffers from an operating system command injection vulnerability that stems from the application's failure to properly filter...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15.1, which originates from an application that may be able to read arbitrary files...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-0225734)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS has a security vulnerability that can be exploited by attackers to cause power consumption to be affected...

Huawei HarmonyOS Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in Huawei HarmonyOS. The vulnerability stems from an out-of-bounds access vulnerability in the DASH module playback. A...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-1587827)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS. An attacker can exploit the vulnerability to affect availability...

Huawei HarmonyOS buffer overflow vulnerability (CNVD-2025-1334222)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability. The vulnerability originates from the DASH module and can be exploited by an attacker to affec...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-1587530)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker exploiting the vulnerability could compromise confidentiality...

RLSA-2024:10281 Moderate: kernel:4.18.0 security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: edia: dvbdev: fix a use-after-free CVE-2024-27043 kernel: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout CVE-2024-27399 kernel: bpf: Add BPFPROGTYPECGROUPSKB attach type...

CVE-2023-23356

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...

CVE-2022-27600

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS...

CVE-2023-23356

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...

CVE-2023-23354

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in...

CVE-2022-27600 QTS, QuTS hero, QuTScloud

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS...

CVE-2022-27600 QTS, QuTS hero, QuTScloud

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS...

CVE-2023-23354

CVE-2023-23354 affects QNAP QuLog Center. The vulnerability is an XSS flaw in QuLog Center before specific fixed versions, allowing remote attackers with user access to bypass security or read data. Affected versions include prior to 1.3.1.645, prior to 1.4.1.691, and prior to 1.5.0.738. The fixe...

CVE-2023-23354 QuLog Center

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in...

CVE-2023-23356

CVE-2023-23356 is a command-injection vulnerability in QNAP QuFirewall. The issue allows remote attackers who have gained administrator access to execute arbitrary commands via the QuFirewall module on affected QNAP OS versions. Affected/impacted component: QuFirewall (QNAP devices). Root cause d...

CVE-2023-23357 QuLog Center

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read application data. We have already fixed the...