CVE-2025-7020 BYD DiLink OS Incorrect encryption Implementation of system log dumps

An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS e.g. in the model ATTO3. An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment IVI unit's storage. This allows the...

Linux Distros Unpatched Vulnerability : CVE-2024-27073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ttpci: fix two memleaks in budgetavattach When saa7146registerdevice and saa7146vvinit fails, budgetavattach should free the resources it allocates, like...

Linux Distros Unpatched Vulnerability : CVE-2022-49976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS The...

Linux Distros Unpatched Vulnerability : CVE-2024-40987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix UBSAN warning in kvdpm.c Adds bounds check for sumovidmappingentry. CVE-2024-40987 Note that Nessus relies on the presence of the package as...

GHSA-H6Q3-P324-W6WF vulnerabilities

Vulnerabilities for packages: corretto...

CVE-2025-8748

MiR software versions prior to 3.0.0 are affected by a command injection vulnerability that allows an authenticated user to execute arbitrary OS commands via a crafted HTTP request. Affected product: MiR robots software. Root cause: inadequate input handling in HTTP request processing leading to ...

Multiple vulnerabilities in Mubit Powered BLUE 870

Overview Powered BLUE 870 provided by Mubit co.,ltd. contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2025-54958 Path traversal CWE-22 - CVE-2025-54959 CVE-2025-54958 Yusuke SAKAI of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC...

CVE-2024-58257

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2024-58256

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

[SECURITY] Fedora 41 Update: mingw-opencv-4.10.0-6.fc41

MinGW Windows OpenCV library...

PT-2025-32345 · Unknown · Powered Blue 870

Name of the Vulnerable Software and Affected Versions: Powered BLUE 870 versions 0.20130927 and prior Description: Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection issue. Successful exploitation of this issue may allow arbitrary OS commands to be executed on the...

iOS iPadOS macOS Privilege Escalation

The vulnerabilities of iOS, iPadOS, and macOS operating systems are related to lack of access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Cisco Spaces Connectors RCE

The vulnerability of the data collection and aggregation application from Cisco Spaces Connector relates to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary...

Admin Framework DoS

The vulnerability of the Admin Framework component in macOS operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CoreServices Privilege Escalation

The vulnerability of the CoreServices component in macOS operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

System Settings Unauthorized Access

The vulnerability of the System Settings component in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

iOS iPadOS Authentication Bypass DoS

The vulnerability of iOS and iPadOS operating systems relates to bypassing authentication through spoofing. Exploiting this vulnerability can allow attackers to trigger a service failure...

PackageKit macOS DoS

The vulnerability of PackageKit for macOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2024-3859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This...

Linux Distros Unpatched Vulnerability : CVE-2025-3753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code execution vulnerability has been identified in the Robot Operating System ROS 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The...