UBUNTU-CVE-2022-48706

In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvfmgmtdev leaks memory if it is not freed before returning. Call is made to correct return statement so memory does not leak. ifcvfinithw does not take care of this so it is...

Yealink Device Management Platform Pre-authentication Remote Command Injection (CVE-2021-27561)

Binary data yealinkdevicemanagementplatformCVE-2021-27561.nbin...

The vulnerability of the bio_first_folio() function in the include/linux/bio.h module of the Block Device Management subsystem of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the biofirstfolio function in the include/linux/bio.h module of the Block Device Management subsystem of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Yealink Device Management Platform Web Interface Detection

Binary data yealinkdevicemanagementplatformwebdetect.nbin...

Microsoft Intune 访问控制错误漏洞

Microsoft Intune is a Microsoft cloud-based management tool from Microsoft Corporation USA that is part of Microsoft Endpoint Manager. It is used to manage mobile devices and operating systems. It is designed to provide unified endpoint management for enterprise and BYOD devices in a way that...

podman security and bug fix update

4.9.4-3.0.1 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 4:4.9.4-3 - rebuild - Related:...

CVE-2023-35756

D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35731

D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

Welotec SMART EMS 安全漏洞

Welotec SMART EMS is a solution for centralized management of distributed devices from Welotec. A security vulnerability exists in Welotec SMART EMS versions prior to 3.1.4 that stems from the presence of a clickjacking vulnerability that could trick a user into performing an unexpected action...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche prior to version 6.4.3, which stems from a path traversal...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a attacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands with SYSTEM privileges...

The vulnerability of the Avalanche mobile device management system’s web component allows a hacker to execute arbitrary code.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

The vulnerability of the Avalanche device management system, related to synchronization errors when using a common resource (“Race Situation”), allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche device management system is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with SYSTEM privileges...

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

The vulnerability in the Avalanche mobile device management web component allows a hacker to trigger a service failure.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.3, which stems from a path traversal...