The vulnerability of the OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2023-50364 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

CVE-2023-51364

A path traversal vulnerability (CVE-2023-51364) affects several QNAP operating systems and could allow reading contents of unintended files and exposing sensitive data over a network. Affected products/versions include QTS 5.1.4.2596 build 20231128 and later; QTS 4.5.4.2627 build 20231225 and lat...

UBUNTU-CVE-2024-23271

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the System Recovery Bootloader for Windows operating systems allows a hacker to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the System Recovery Bootloader for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions and execute arbitrary code...

CVE-2024-3863

The Mozilla Foundation Security Advisory describes this flaw as: The executable file warning was not presented when downloading .xrm-ms files. Note: This issue only affected Windows operating systems. Other operating systems are unaffected...

The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Microsoft DWM Core Library on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Kerberos protocol for Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Quick.cgi file allows attackers to execute arbitrary commands on QTS, QuTS hero, and QuTScloud operating systems for network devices from Qnap.

The vulnerability of the Quick.cgi file exists in operating systems such as QTS, QuTS Hero, and QuTScloud, as well as in networking devices from Qnap. This vulnerability stems from the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

CVE-2024-23593

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges...

The vulnerability of the LDAP protocol implementation in F5OS-A operating systems, hardware devices of the F5 rSeries, and F5OS-C application delivery controllers of F5 VELOS allows a hacker to circumvent security restrictions.

The vulnerability of the LDAP protocol implementation in F5OS-A operating systems, F5 rSeries hardware devices, and F5OS-C application delivery controllers for F5 VELOS operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attacker...

Microsoft Windows Local Security Authority Subsystem Service 安全漏洞

Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a secure boot from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Secure Boot. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Windows 11 version 21H2 for...

The vulnerability of the kernel of iOS operating systems, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS allows attackers to disclose protected information.

The vulnerability of the kernel of iOS, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these systems...

The vulnerability of the operating system kernels in iPadOS, tvOS, iOS, watchOS, macOS, visionOS allows a perpetrator to execute arbitrary code.

The vulnerability of the operating system kernels, including iPadOS, tvOS, iOS, watchOS, macOS, and visionOS, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...