Command Execution Vulnerability in HkCMS

HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HkCMS suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

NS-NGFW is a high-performance application layer firewall that can comprehensively deal with network threats. A command execution vulnerability exists in NS-NGFW, which can be exploited by an attacker to gain server control privileges...

CVE-2020-11181

CVE-2020-11181 is a Qualcomm/Qualcomm closed-source component issue described as an out-of-bounds access due to improper validation of a buffer pointer received from HLOS. Affected are Snapdragon platforms including Compute, Connectivity, Consumer IoT, Industrial IoT, and Mobile. The vulnerabilit...

UBUNTU-CVE-2015-9289

In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23...

CVE-2015-3691

The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer...

Null pointer dereference

The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer...

Apple MAC OS X Monitor Control Command Set Kernel Extension Arbitrary Code Execution Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X's handling of the Monitor Control Command Set kernel extension allows an attacker to run a malicious application to control function pointers in the kernel and execute arbitrary code...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.250.2 - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077389 CVE-2015-3331 2.6.39-400.250.1 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807440 CVE-2015-2150 - xen-blkfront: fix accounting of reqs when...