PT-2024-25044 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A race condition vulnerability exists in the binder driver module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no information...

PT-2024-25045 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a NULL pointer access vulnerability in the clock module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment,...

PT-2024-25038 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: System sharing pop-up module affected versions not specified Description: The issue is related to a permission verification vulnerability in the system sharing pop-up module. Successful exploitation of this vulnerability will affect...

PT-2024-25043 · Unknown · Account Module

Name of the Vulnerable Software and Affected Versions: Account module affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the account module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the...

PT-2024-25036 · Huawei · Huawei System Sharing Pop-Up Module

Name of the Vulnerable Software and Affected Versions: Huawei System Sharing Pop-Up Module affected versions not specified Description: The issue is related to an insufficient verification vulnerability in the system sharing pop-up module. Successful exploitation of this vulnerability will affect...

PT-2024-14710 · Unknown · Soundtrigger Module

Name of the Vulnerable Software and Affected Versions: soundtrigger module affected versions not specified Description: A race condition vulnerability exists in the soundtrigger module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no...

PT-2024-14574 · Unknown · Rsmc Module

Name of the Vulnerable Software and Affected Versions: RSMC module affected versions not specified Description: The issue is a double-free vulnerability in the RSMC module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there is no...

CVE-2024-32761

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

CVE-2024-32761

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

CVE-2024-1930

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the opensession D-Bus method. For each...

AZL-66105 CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the opensession D-Bus method. For each...

AZL-40343 CVE-2024-1930 affecting package dnf5 for versions less than 5.1.11-3

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the opensession D-Bus method. For each...

CVE-2024-1930 No Limit on Number of Open Sessions / Bad Session Close Behaviour

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the opensession D-Bus method. For each...

PT-2024-4592 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java affected versions not specified Description: The issue is related to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, allowing attackers to perform Denial of Service DoS attacks on the...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A null pointer access vulnerability exists in the Huaw...

The vulnerability of the formAddDnsForward() function (/goform/AddDnsForward) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formAddDnsForward function /goform/AddDnsForward of the Tenda W15E router software lies in the issue of the operation going beyond the buffer in memory when processing the DnsForwardRule parameter. Exploiting this vulnerability allows a remote attacker to compromise the...

mysql: InnoDB unspecified vulnerability (CPU Jul 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

golang: path/filepath: stack exhaustion in Glob

A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability...

golang: io/fs: stack exhaustion in Glob

A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...