Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.7.3 and iPadOS version 16.7.3, which originates from an applicatio...

IBM Watson CP4D Data Stores Encryption Bypass

The vulnerability of cloud-based data storage software for IBM Watson CP4D Data Stores lies in the lack of encryption measures for protected data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PowerScale OneFS Audit Log Data Compromise

The vulnerability of the PowerScale OneFS operating system is related to errors in audit log management. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

PT-2025-2513 · Qualcomm · Qualcomm Embedded Platform Microcode

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform microcode affected versions not specified Description: The issue is related to the hab ioctl function in Qualcomm's microcode, which is vulnerable to a buffer overflow in memory. This can lead to the disclosure of...

CVE-2024-23275

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to access protected user data...

VMware ESXi UHCI Controller Compromise Information Disclosure

The vulnerability of the UHCI-based USB controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

automation-eda-controller ansible-rulebook ansible-automation-platform-installer Unauthorized Access

The vulnerability of the automation-eda-controller/ansible-rulebook/ansible-automation-platform-installer package of the Red Hat Ansible Automation Platform is related to the lack of origin verification in WebSockets, resulting from an incorrect restriction on the communication channel. Exploitin...

DNS Server Windows Disclosure DoS

The vulnerability of the DNS server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a attacker to disclose sensitive information or cause service failures...

PT-2024-2975 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the idxd component of the Linux kernel, where a pre-release silicon erratum workaround was leaked into upstream code, causing the WQCFG registers not to be...

Shortcuts Component Disclosure

The vulnerability of the Shortcuts component in iOS, macOS, and iPadOS systems is related to permission handling errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

PDF Reader Buffer Overflow Information Disclosure

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 is related to the reading of data outside the buffer in memory when processing the numColorRecords parameter for OpenType font...

XWiki Platform Information Disclosure

The vulnerability of the XWiki Platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose the protected data remotely...

Adaptive Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Solr Software Solution Privilege Escalation

The vulnerability of the Solr software for enterprise resource planning software Apache OFBiz lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to remotely modify protected information...

PT-2024-10063 · Qualcomm · Qualcomm Security Processor

Name of the Vulnerable Software and Affected Versions: Qualcomm security processor software affected versions not specified Description: The issue is related to memory corruption when allocating and accessing an entry in an SMEM partition continuously. This can lead to reading beyond the valid...

LearnDash Plugin Unauthorized Access

The vulnerability of the LearnDash plugin’s interface in the WordPress content management system is related to insufficient protection of operational data during the processing of the sfwd-question and ld-exam endpoints. Exploiting this vulnerability can allow an attacker, operating remotely, to...

Lenovo Tab M8 HD Information Disclosure

The vulnerability of Lenovo Tab M8 HD tablet’s microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to disclose the protected information...

WP Sessions Time Monitoring Plugin Protected Information Disclosure

The vulnerability of the WP Sessions Time Monitoring full-automatic content management system’s plugin is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

App Sandbox Access Control macOS

The vulnerability of the App Sandbox access control technology in the macOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a hacker to escape from the isolated software environment and disclose the protected information...

XWiki Platform Unauthorized Access

The vulnerability of the “org.xwiki.platform:xwiki-platform-livetable-ui” component of the XWiki platform involves the disclosure of information in an unauthorized manner. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...