Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the bindAndGetCallIdentification method in the CallScreeningServiceHelper.java file contains a privilege bypass with a possible wa...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS that originates from a misauthorization when enabling Citrix CEB for WebLogin. A local, unauthenticated, low-privileged user could use this vulnerability to bypass existing controls and perform...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.0.0 and prior versions, which stems from a background task management privilege bypass vulnerability...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.0.0 and prior versions that stems from a meta-capability privilege bypass vulnerability...

Microsoft Office 数据伪造问题漏洞

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...

Microsoft Office 数据伪造问题漏洞

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...

Microsoft Teams 数据伪造问题漏洞

Microsoft Teams is a software for online meetings, chat, and cloud storage capabilities from Microsoft USA. A data forgery vulnerability exists in Microsoft Teams version 24046.2813.2770.1094, which stems from a specially crafted library in the macOS version that can be exploited to gain access t...

Microsoft Office 数据伪造问题漏洞

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...

Microsoft Teams 数据伪造问题漏洞

Microsoft Teams is a software for online meetings, chat, and cloud storage capabilities from Microsoft USA. A data forgery issue vulnerability exists in Microsoft Teams version 24046.2813.2770.1094, which stems from a specially crafted library in the macOS version that can be exploited to gain...

Microsoft Teams 数据伪造问题漏洞

Microsoft Teams is a software for online meetings, chat, and cloud storage capabilities from Microsoft USA. A data forgery issue vulnerability exists in Microsoft Teams version 24046.2813.2770.1094, which stems from a specially crafted library in the macOS version that can be exploited to gain...

CVE-2024-32908

In secmediaprotect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from privilege bypass...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a competing condition in the secmediaprotect module of media.c, where a privilege bypass is possible...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from an incorrect state checking issue in the DA module, which may allow privilege bypass...

D-Link DIR-845 安全漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-845L v1.01KRb03 version and earlier versions, which stems from a privilege bypass vulnerability in the getcfg.php component...

Wagtail 安全漏洞

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Wagtail versions 6.0 through 6.0.2, which stems from a vulnerability that allows an attacker to bypass privilege checking via wagtail.contrib.settings, ModelViewSet...

Tolgee 安全漏洞

Tolgee is an open source multilingual translation and localization platform designed to help development teams easily manage and maintain multilingual software applications and websites. A security vulnerability exists in Tolgee version v3.57.2, which stems from a vulnerability that allows an...

Deno 安全漏洞

Deno is open source for a simple, modern and secure JavaScript and TypeScript runtime environment. It uses V8 and is built with Rust. A security vulnerability exists in versions prior to Deno 1.42.2, which stems from a race condition between an ANSI escape sequence and reading standard input,...

XWiki Platform 安全漏洞

XWiki Platform is the XWiki Foundation's suite of wiki platforms for creating collaborative Web applications. A security vulnerability exists in XWiki Platform that stems from the fact that in a multi-language wiki, any user with editing privileges can edit translations, thus circumventing the...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v3.2.4. A remote attacker could exploit the vulnerability to bypass privilege authentication to insta...