AXIS OS 安全漏洞

AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that originates from allowing access to restricted D-Bus methods...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from an incorrect user privilege level...

Linux Distros Unpatched Vulnerability : CVE-2013-7023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffcombineframe function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from a competitive condition that could block web interface access...

Linux Distros Unpatched Vulnerability : CVE-2013-1752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service memory consumpti...

Linux Distros Unpatched Vulnerability : CVE-2018-8897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandled in the development of some or...

CVE-2024-53032 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Memory corruption may occur in keyboard virtual device due to guest VM interaction...

CVE-2024-53032 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Memory corruption may occur in keyboard virtual device due to guest VM interaction...

CVE-2024-53029 Improper Input Validation in Automotive OS Platform

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine...

CVE-2024-53012 Improper Input Validation in Automotive OS Platform

Memory corruption may occur due to improper input validation in clock device...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption during voice activation when sound model parameters are loaded from HLOS to ADSP...

Linux Distros Unpatched Vulnerability : CVE-2010-2089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent...

Linux Distros Unpatched Vulnerability : CVE-2011-0051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier...

The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems arises from an improper definition of the link before accessing a file. This allows attackers to escalate their privileges.

The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems stems from an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

Wear OS Security Bulletin—March 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2025-03-05 or later from the March 2025 Android Security Bulletin in addition to all issues in this bulletin. We encourage all...

The vulnerability of the pfifo_tail_enqueue() function (net/sched/sch_fifo.c) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pfifotailenqueue function net/sched/schfifo.c in the Linux operating system is related to a discrepancy in functionality according to the specifications. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) platform allows a perpetrator to load files into any location within the operating system of the affected device.

The vulnerability of the application software interface of the Cisco Identity Services Engine ISE management platform is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to load files into any location within...

Advisory ROSA-SA-2025-2736

Software: ghostscript 9.27 OS: ROSA Virtualization 3.0 packageevrstring: ghostscript-9.27-13.0.1.rv30 CVE-ID: CVE-2024-33871 BDU-ID: 2024-05064 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability exists in the contrib/opvp/gdevopvp.c component of the Ghostscript processing, conversion, and document...

[SECURITY] Fedora 40 Update: python3.6-3.6.15-43.fc40

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

The vulnerability of the monitoring function for the operational status of the Cisco NX-OS operating system in Cisco Nexus 3000 and Nexus 9000 switches stems from deficiencies in access control. This allows a malicious actor to trigger a service failure.

The vulnerability of the monitoring function for the operational status of the Cisco NX-OS operating system on Cisco Nexus 3000 and Nexus 9000 switches is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sendi...