Linux Distros Unpatched Vulnerability : CVE-2017-11144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing...

GHSA-MHWM-JH88-3GJF vulnerabilities

Vulnerabilities for packages: jruby, ruby...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2022-49569

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers In case a IRQ based transfer times out the bcm2835spihandleerr function is called. Since commit 1513ceee70f2 "spi: bcm2835: Drop dmapending flag" the...

CVE-2022-49061

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link When using a fixed-link, the altrtsepcs driver crashes due to null-pointer dereference as no phydevice is provided to tsepcsfixmacspeed function. Fix this by...

GHSA-V488-9CVJ-5MX7 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

ROS-20250220-01

Vulnerability of tunfreenetdev function of virtual network drivers TUN/TAP of kernel operating systems Linux is related to repeated freeing of previously freed memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service or escalate privileges A vulnerability in...

The vulnerability of the SceneKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the SceneKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to operations where data is written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security...

CVE-2023-50358

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows a perpetrator to influence data integrity.

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOS, watchOS, iPadOS, and iOS lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the Kernel component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows attackers to influence data integrity.

The vulnerability of the Kernel component in macOS, tvOS, watchOS, iPadOS, and iOS is related to deficiencies in access control within isolated environments. Exploiting this vulnerability could allow attackers to compromise data integrity...

The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper code generation. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...

The vulnerability of the ICU operating system components in MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS allows attackers to trigger service failures.

The vulnerability of ICU components in MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Contact Information Handler component in operating systems such as iOS, iPadOS, and MacOS allows attackers to gain unauthorized access to protected information.

The vulnerability of the Contact Information Handler component in iOS, iPadOS, and MacOS systems is related to improper authorization. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the WebHandler component in operating systems such as iOS, iPadOS, tvOS, macOS, watchOS, visionOS, and the Safari browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebHandler component in iOS, iPadOS, tvOS, macOS, watchOS, visionOS operating systems, and the Safari browser is related to the execution of operations outside of the memory buffers. Exploiting this vulnerability can allow a remote attacker to gain access to confidential...

The vulnerability of the zram_meta_alloc() function in the zram module of Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the zrammetaalloc function in the zram module of Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Vulnerability of operating systems such as iOS, iPadOS, tvOS, MacOS, watchOS, and visionOS, due to errors in state management, allows attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems such as iOS, iPadOS, tvOS, macOS, watchOS, and visionOS are related to state management errors. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential information...

Microsoft KernelStream 安全漏洞

Microsoft KernelStream is a service from Microsoft Corporation USA for supporting streaming data in the kernel. A security vulnerability exists in Microsoft KernelStream. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10...

PT-2025-6308 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the implementation of the Kerberos protocol in Windows operating systems, caused by insufficient input validation. This could...