CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

Google Android Remote Code Execution Vulnerability (CNVD-2020-04546)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in Google Android. An attacker can exploit the vulnerability to obtain URL administrator privileges...

sysstat resource management error vulnerability

sysstat is a set of system performance monitoring tools for the Linux platform. A resource management error vulnerability exists in the 'checkfileactlst' function of the sacommon.c file in sysstat 12.2.0 and earlier versions. The vulnerability stems from mismanagement of system resources e.g.,...

Bento4 Post-Release Reuse Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in the 'AP4Sample::GetOffset' function of the Core/Ap4Sample.h file in Bento4 version 1.5.1.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

MetInfo suffers from a file upload vulnerability (CNVD-2020-01603)

MetInfo is a professional enterprise-level CMS building system. A file upload vulnerability exists in MetInfo, which can be exploited by attackers to gain web administrator privileges...