1154 matches found
Nihon Kohden Central Monitor CNS-6201 代码问题漏洞
Nihon Kohden Central Monitor CNS-6201 is a nursing station monitoring system from Nihon Kohden, Japan. A code issue vulnerability exists in Nihon Kohden Central Monitor CNS-6201, which stems from the presence of a null pointer dereference when processing specially crafted UDP packets, which could...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from gfs2metaaops not implementing the migratefolio function, which could result in an abnormal migration functio...
PT-2025-36580
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...
Envoy 资源管理错误漏洞
Envoy is an Enphase open source gateway program for connecting smart home devices. A resource management error vulnerability exists in Envoy versions 1.34.0 through 1.34.4 and 1.35.0, which stems from the presence of post-release reuse in the DNS cache and could result in an abnormal process...
CVE-2025-54588: Use After Free
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...
CVE-2025-54588
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...
CVE-2025-54634
Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54634
Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54634
Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which can be exploited by an attacker to cause the playback control screen to display abnormally...
PT-2025-32076 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: Huawei HarmonyOS versions 5.0.1 and 5.1.0 Description: The software contains an improper processing of abnormal conditions in huge page separation. Successful exploitation of this issue may affect availability. Recommendations: Audit devices...
CVE-2025-54596
Abnormal Security /v1.0/rbac/usersv2/USERID/ before 2025-02-19 allows downgrading the privileges of other user accounts...
CVE-2025-54596
Abnormal Security /v1.0/rbac/usersv2/USERID/ before 2025-02-19 allows downgrading the privileges of other user accounts...
CVE-2025-54596
Abnormal Security /v1.0/rbac/usersv2/USERID/ before 2025-02-19 allows downgrading the privileges of other user accounts...
CVE-2025-54596
CVE-2025-54596 affects Abnormal Security API: the endpoint /v1.0/rbac/users_v2/{USER_ID}/ (pre-2025-02-19) allows downgrading the privileges of other user accounts. CVSS v3.1 base score 4.3 (Medium) with Network attack vector, Low privileges required, No user interaction. Remediation cited: updat...
CVE-2025-54596
Abnormal Security /v1.0/rbac/usersv2/USERID/ before 2025-02-19 allows downgrading the privileges of other user accounts...
PT-2025-30913 · Unknown · Abnormal Security
Name of the Vulnerable Software and Affected Versions: Abnormal Security versions prior to 2025-02-19 Description: The software contains an issue that allows downgrading the privileges of other user accounts. The issue is related to the /v1.0/rbac/users v2/USER ID/ API endpoint, where USER ID is ...
Abnormal AI Abnormal Security API 安全漏洞
Abnormal AI Abnormal Security API is an API from Abnormal AI. A security vulnerability exists in Abnormal AI Abnormal Security API versions prior to 2025-02-19, which stems from a privilege degradation vulnerability...