Security Bulletin: IBM Extended Command-Line Interface (XCLI) Utility is affected by a vulnerability in Apache Log4j (CVE-2021-4104)

Summary A vulnerability was identified within the Apache Log4j library that is used by IBM Extended Command-Line Interface XCLI Utility for IBM FlashSystem A9000/A9000R, IBM XIV Storage System models 114/214/314, and IBM Spectrum Accelerate. This vulnerability has been addressed. Vulnerability...

Buffer Overflow Vulnerability in Multiple Apple Products (CNVD-2022-23007)

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, Apple iPadOS is an operating system for iPad tablets, and Apple watchOS is a smartwatch operating system. A buffer overflow vulnerability exists in several Apple products. The...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, Apple iPadOS is an operating system for iPad tablets, and Apple watchOS is a smartwatch operating system. A buffer overflow vulnerability exists in several Apple products. The...

About the security content of macOS Big Sur 11.6.5

About the security content of macOS Big Sur 11.6.5 This document describes the security content of macOS Big Sur 11.6.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of iOS 15.4 and iPadOS 15.4

About the security content of iOS 15.4 and iPadOS 15.4 This document describes the security content of iOS 15.4 and iPadOS 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of tvOS 15.4

About the security content of tvOS 15.4 This document describes the security content of tvOS 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

[SECURITY] Fedora 34 Update: axel-2.17.10-1.fc34

Axel tries to accelerate HTTP/FTP downloading process by using multiple connections for one file. It can use multiple mirrors for a download. Axel has no dependencies and is lightweight, so it might be useful as a wget clone on byte-critical systems...

CVE-2019-12500

The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking...

Authentication flaw

The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking...

CVE-2019-12500

The CVE-2019-12500 entry concerns the Xiaomi M365 scooter. The vulnerability is rooted in Bluetooth Low Energy commands lacking server-side authentication, enabling spoofing of critical controls such as a sudden acceleration, braking, locking, and unlocking. Affected firmware is prior to 1.5.1. D...

The Xiaomi M365 Scooter Can Be Hacked to Speed Up or Stop

A hacker can accelerate Xiaomi M365 scooter—or hit the breaks—while a rider is on it...

cn.acooly:acooly-auth-wechat-authenticator (=5.2.1), co.pishfa.accelerate:accelerate-core (>=1.0.0 <=1.0.15) +425 more potentially affected by CVE-2016-10006 via org.owasp.antisamy:antisamy (>=1.4.3 <=1.5.3)

org.owasp.antisamy:antisamy MAVEN version =1.4.3, =1.0.0, =1.0.0, =1.0.1 - co.pishfa.accelerate:accelerate-service =1.0.0 - com.acooly:acooly-component-account =5.2.1 - com.acooly:acooly-component-app =5.2.1 - com.acooly:acooly-component-assetmgmt =5.2.1 - com.acooly:acooly-component-certificatio...

ImageMagick ComputeResizeImage function stack buffer vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A stack buffer vulnerability exists in the ComputeResizeImage function in the MagickCore/accelerate.c file in ImageMagick 7.0.7-22. A remote attacker can cause a denia...

Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data 9328.prm...

PHP DOS vulnerability new: CVE-2 0 1 5-4 0 2 4 Reviewed-vulnerability warning-the black bar safety net

0x01 bypassing the WAF principle According to the PHP DOS vulnerability principle, in multipartbufferheaders function parses the header of the corresponding value, the value value exists in the n rows. Each line of the string with whitespace at the beginning or does not exist. character':'are...

Apple iOS/OS X Arbitrary Code Execution Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS versions prior to 9.1 and Apple OS X versions prior to 10.11.1 when...

APPLE-SA-2015-10-21-1 iOS 9.1

APPLE-SA-2015-10-21-1 iOS 9.1 iOS 9.1 is now available and addresses the following: Accelerate Framework Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to arbitrary code execution Description: A...

CVE-2015-5940

The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

Memory corruption

The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...