CVE-2024-44141

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS 14.6, which originates from a person with physical access to an unlocked Mac may be able to obtain root code execution...

Tenda RX9 Pro 安全漏洞

Tenda RX9 Pro is a high-performance wireless router that provides a stable and fast internet connection. A stack overflow vulnerability exists in Tenda RX9 Pro version 22.03.02.20, which affects the sub424CE0 function in the /goform/setMacFilterCfg file in the POST request processing component. T...

PT-2024-16210 · Tenda · Tenda Rx9 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX9 Pro version 22.03.02.20 Description: A critical issue affects the function sub 424CE0 of the file /goform/setMacFilterCfg in the component POST Request Handler. The manipulation of the deviceList argument leads to a stack-based buff...

Mozilla Thunderbird Security Update (MFSA2024-52) - Mac OS X

Mozilla Thunderbird is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird ESR Security Update (MFSA2024-52) - Mac OS X

Mozilla Thunderbird ESR is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Python Command Injection Vulnerability (Oct 2024) - Mac OS X

Python is prone to a command injection vulnerability in the venv module. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Security Update (stable-channel-update-for-desktop_22-2024-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

SUSE CVE-2022-48949

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from the stack meaning that information may be...

The vulnerability of the SetMACFilters2() function in the prog.cgi script of D-Link DIR-878 and DIR-882 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetMACFilters2 function in the prog.cgi script of D-Link DIR-878 and DIR-882 routers exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

UBUNTU-CVE-2024-50041

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by synchronizing access to macfilterhash This patch addresses a macvlan leak issue in the i40e driver caused by concurrent access to vsi-macfilterhash. The leak occurs when multiple threads attempt to modif...

UBUNTU-CVE-2022-48949

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from the stack meaning that information may be...

CVE-2024-49997

CVE-2024-49997 is a Linux kernel vulnerability where padding was not zeroed, causing memory disclosure observable on the wire in the net: ethernet: lantiq_etop driver. The root cause is missing zeroing during padding; the patch adds skb_put_padto() to pad Ethernet frames and zero expanded buffers...

Adobe Animate 21.x < 21.0.7 Multiple Vulnerabilities (APSB21-50)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 21.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-50 advisory. - Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability. An...

Adobe Animate 20.x < 20.5.2 / 21.x < 21.0.4 Multiple Vulnerabilities (APSB21-21)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 20.5.2 or 21.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-21 advisory. - Adobe Animate version 21.0.3 and earlier is affected by a Heap-based Buffer Overflow...

Adobe Animate 20.x < 20.5.2 Multiple Vulnerabilities (APSB20-61)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 20.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-61 advisory. - Adobe Animate version 20.5 and earlier is affected by an out-of-bounds read vulnerability, which could...

Adobe Animate 20.x < 20.5.2 / 21.x < 21.0.6 Multiple Vulnerabilities (APSB21-35)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 20.5.2 or 21.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-35 advisory. - Adobe Animate version 21.0.5 and earlier is affected by an Out-of-bounds Read vulnerability...

Adobe Animate 20.x < 20.0.0 A Vulnerability (APSB19-34)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 20.0.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-34 advisory. - Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading dll hijacking vulnerability...

Adobe Photoshop 21.x < 21.2.3 Vulnerability (macOS APSB20-63)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 21.2.3. It is, therefore, affected by a vulnerability as referenced in the apsb20-63 advisory. - Adobe Photoshop for Windows version 21.2.1 and earlier is affected by an uncontrolled search path element...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11...