MicroWorld eScan Anti-Virus 命令注入漏洞

MicroWorld eScan Anti-Virus is an Internet security solution from MicroWorld, Inc. It provides virus protection for enterprise and home SOHO users. A command injection vulnerability exists in MicroWorld eScan Anti-Virus version 7.0.32, which originates from an operating system command injection i...

mySCADA myPRO 操作系统命令注入漏洞

mySCADA myPRO is a professional HMI/SCADA system from mySCADA, Inc. designed for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO that stems from an inability to properly neutralize a POST request with an email...

The vulnerability of the CoreMedia component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows attackers to gain increased privileges.

The vulnerability of the CoreMedia component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

Advisory ROSA-SA-2025-2667

software: sqlite 3.41.2 OS: ROSA-CHROME packageevrstring: sqlite-3.41.2-2 CVE-ID: CVE-2023-7104 BDU-ID: 2024-00480 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the sessionReadRecord function of the ext/session/sqlite3session.c file of the SQLite database management system is related to a buffer...

Advisory ROSA-SA-2025-2648

software: ghostscript 9.54.0 OS: ROSA-CHROME packageevrstring: ghostscript-9.54.0 CVE-ID: CVE-2023-43115 BDU-ID: 2023-06329 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the gdevijs.c component of the Ghostscript document processing software suite is related to incorrect code generation...

DEBIAN-CVE-2025-0781

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...

UBUNTU-CVE-2025-0781

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...

CVE-2024-56754 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-56754 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

The vulnerability of the subflow_error_report() component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the subflowerrorreport component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the gve_main.c component in the Linux operating system, related to pointer dereferencing errors, allows a malicious actor to cause a service failure.

The vulnerability of the gvemain.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

FlightGear 安全漏洞

FlightGear is a free open source GPL licensed flight simulator from FlightGear Open Source. A security vulnerability exists in flightgear that originates from an attacker being able to bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user is authorized to...

ROS-20250128-07

A vulnerability in the HID Profile Human Interface Device interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to an access control flaw. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary commands...

DEBIAN-CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24160

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24146

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Deleting a conversation in Messages may expose user contact information in system logging...

CVE-2025-24141

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. An attacker with physical access to an unlocked device may be able to access Photos while the app is locked...

CVE-2025-24134

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data...

DEBIAN-CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user...

CVE-2025-24123

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24126

An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to corrupt process memory...