Google Android Information Disclosure Vulnerability (CNVD-2024-07851)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2024-07852)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2023-39394

Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified...

CVE-2023-39381

Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart...

CVE-2023-39396

Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability...

ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66413)

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

Vim Divide by Zero Flaw Vulnerability

Vim is a cross-platform text editor. Vim suffers from a divide-by-zero flaw vulnerability that originates from a divide-by-zero flaw in the function scrollcursorbot. An attacker can exploit this vulnerability to cause a denial of service attack...

SUSE CVE-2022-48579

UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...

2022's most routinely exploited vulnerabilities—history repeats

The Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, Federal Bureau of Investigation FBI, and international partners have released a joint Cybersecurity Advisory CSA called the 2022 Top Routinely Exploited Vulnerabilities. We went over the list and it felt like...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2023-2500)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass...

QEMU Memory Misreference Vulnerability (CNVD-2023-61010)

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a memory misreference vulnerability that stems from a confusion in the instructions responsible for freeing memory in the e1000e NIC...

The vulnerability of the file system driver of the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the file system driver of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2023-3324 Insecure deserialization in zenon internal DLLs

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-59025)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a resource management error vulnerability that can be exploited by an attacker to trigger post-release reuse when creating a WebRTC connection over HTTPS...

IBM DB2 Elevation of Privilege Vulnerability (CNVD-2023-58521)

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. An elevation of privilege vulnerability exists in IBM DB2, which can be exploited by an attacker t...

Google Android elevation of privilege vulnerability (CNVD-2024-07857)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to cause an elevation of privilege...

Google Android Denial of Service Vulnerability (CNVD-2023-60889)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability caused by a startup loop due to resource exhaustion in the Policy.java policy. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Framework elevation of privilege vulnerability (CNVD-2024-07855)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework. An attacker can exploit this vulnerability to gain elevated privileges on the system...

Google Android Framework elevation of privilege vulnerability (CNVD-2024-13745)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework, which is due to an error in a framework component that can be exploited by an attacker to gain elevated privileges on the system...