CVE-2023-33088

Memory corruption when processing cmd parameters while parsing vdev...

PT-2025-15395 · Siemens · Scalance Lpe9413 +9

Name of the Vulnerable Software and Affected Versions: Industrial Edge Device Kit - arm64 versions V1.17 through V1.20.2-1, V1.21 versions prior to V1.21.1-1 Industrial Edge Device Kit - x86-64 versions V1.17 through V1.20.2-1, V1.21 versions prior to V1.21.1-1 Industrial Edge Own Device IEOD...

CVE-2024-53032

Memory corruption may occur in keyboard virtual device due to guest VM interaction...

CVE-2024-53032 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Memory corruption may occur in keyboard virtual device due to guest VM interaction...

CVE-2024-53032

CVE-2024-53032 describes a memory corruption issue in the keyboard virtual device triggered by guest VM interaction on Qualcomm chipsets, with a TOCTOU race condition reported in automotive OS platforms. The vulnerability is rated HIGH (CVSS v3.1: 7.0 base) under local attack vector, with high im...

DEBIAN-CVE-2024-57995

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12kmacassignviftovdev In ath12kmacassignviftovdev, if arvif is created on a different radio, it gets deleted from that radio through a call to ath12kmacunassignlinkvif. This action...

CVE-2024-38420

Memory corruption while configuring a Hypervisor based input virtual device...

CVE-2021-31428

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2022-34889

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 51537. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2020-8871

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 . An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists with...

CVE-2024-38420

Memory corruption while configuring a Hypervisor based input virtual device...

CVE-2024-38420

CVE-2024-38420 is a memory corruption vulnerability affecting Qualcomm chipsets during configuration of a Hypervisor-based input virtual device. Connected sources confirm this is tied to a local attack surface (attack vector: LOCAL) with low privileges required and no user interaction, and they r...

CVE-2024-38420 Improper Input Validation in Hypervisor

Memory corruption while configuring a Hypervisor based input virtual device...

CVE-2024-38420 Improper Input Validation in Hypervisor

Memory corruption while configuring a Hypervisor based input virtual device...

PT-2025-2515 · Qualcomm · Hypervisor

Name of the Vulnerable Software and Affected Versions: Qualcomm affected versions not specified Description: The issue involves memory corruption that occurs while configuring a Hypervisor based input virtual device. This corruption happens during the configuration process, indicating a problem...

Cisco NX-OS Command Injection (CVE-2017-12339)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...

Cisco NX-OS Improper Input Validation (CVE-2017-12338)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...

Cisco NX-OS Command Injection (CVE-2017-12335)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...

Cisco NX-OS Command Injection (CVE-2017-12330)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...

UBUNTU-CVE-2022-48861

In the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vpvdparemove When vpvdpa driver is unbind, vpvdpa is freed in vdpaunregisterdevice and then vpvdpa-mdev.pcidev is dereferenced in vpmodernremove, triggering use-after-free. Call Trace of unbinding driv...