Huawei EMUI and HarmonyOS MTP Module Improper Access Control Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An improper access control vulnerability exists in Huawei EMUI and HarmonyOS MTP module, which can be exploited b...

Huawei HarmonyOS Code Issue Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a code issue vulnerability that stems from a null pointer dereference, which can be exploited by an attacker to affect...

Huawei HarmonyOS buffer overflow vulnerability (CNVD-2025-1334222)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability. The vulnerability originates from the DASH module and can be exploited by an attacker to affec...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12727

CVE-2024-12727 is a pre-auth SQL injection affecting Sophos Firewall’s email protection feature on versions older than 21.0 MR1 (21.0.1). The underlying issue can allow access to the reporting database and, in combination with a specific Secure PDF eXchange (SPX) configuration and HA mode, may le...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-56200

Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image proxy for compressing and resizing remote files could allow attacks that could affect availability, such as by abnormally increasing the CPU usage of the server on which this...

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

PT-2024-9754

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 21.0 MR1 21.0.1 Description A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall allows access to the reporting database and can lead to remote code execution if a specific...

PT-2024-36533 · Unknown · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: An issue in CodeAstro Complaint Management System allows a remote attacker to escalate privileges via the "mess-view.php" component. Recommendations: For CodeAstro Complaint...

CVE-2024-8932 affecting package php for versions less than 8.3.14-1

CVE-2024-8932 affecting package php for versions less than 8.3.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-11236 affecting package php for versions less than 8.3.14-1

CVE-2024-11236 affecting package php for versions less than 8.3.14-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Cognos Transformer is affected by vulnerabilities in IBM® Java™ and Bouncy Castle Crypto Package For Java

Summary There are vulnerabilities in IBM® Java™ and Bouncy Castle Crypto Package For Java consumed by IBM Cognos Transformer. For more information about the vulnerability impact, refer to the table in the "Related Information" section. This Security Bulletin relates only to third-party components...

edk2: Integer overflows in PeCoffLoaderRelocateImage

A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

CVE-2024-10476

CVE-2024-10476 concerns default credentials in BD Diagnostic Solutions products. The BD advisories and cross-ref entries state that attackers could access, modify, or delete data (including PHI/PII) and potentially disrupt availability. The scope notes that BD Synapsys Informatics Solution is in ...