2014 matches found
CVE-2025-21468 Out-of-bounds Write in Computer Vision
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer...
CVE-2025-21467 Out-of-bounds Write in Computer Vision
Memory corruption while reading the FW response from the shared queue...
CVE-2025-21467 Out-of-bounds Write in Computer Vision
Memory corruption while reading the FW response from the shared queue...
CVE-2025-21462 Out-of-bounds Write in Computer Vision
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit...
Security Update for Trend Micro Trend Vision One (April 2025)
Overview Trend Micro Incorporated has released the security update for the administration console of Trend Vision One. This update addressed the following vulnerabilities: CVE-2025-31282, CVE-2025-31283, CVE-2025-31284, CVE-2025-31285, CVE-2025-31286 Trend Micro Incorporated reported these...
Apple多款产品 安全漏洞
Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets.The vulnerabilities exist in several Apple products. A securi...
Apple多款产品 安全漏洞
Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets.The vulnerabilities exist in a number of Apple products. A...
The vulnerability of the RPAC component in operating systems such as MacOS Sequoia, tvOS, visionOS, iOS, and iPadOS allows attackers to circumvent existing security restrictions.
The vulnerability of the RPAC component in macOS Sequoia, tvOS, visionOS, iOS, and iPadOS relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
Revisiting Data Auditing in Large Vision-Language Models
With the surge of large language models LLMs, Large Vision-Language Models VLMs--which integrate vision encoders with LLMs for accurate visual grounding--have shown great potential in tasks like generalist agents and robotic control. However, VLMs are typically trained on massive web-scraped...
The vulnerability of the CoreAudio component in operating systems such as MacOS Sequoia, tvOS, visionOS, iOS, and iPadOS allows a hacker to execute arbitrary code.
The vulnerability of the CoreAudio component in MacOS Sequoia, tvOS, visionOS, iOS, and iPadOS relates to reading beyond the buffer boundary in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2025-32993
Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password aka index.php?/home/forgot-password visusername parameter. Authentication is not needed...
CVE-2025-31200
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a repor...
CVE-2025-32993
Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password aka index.php?/home/forgot-password visusername parameter. Authentication is not needed...
Vision Helpdesk 安全漏洞
Vision Helpdesk is a customer service software from Vision Helpdesk India. A security vulnerability exists in Vision Helpdesk version 5.7.0 and earlier, which stems from a time-based blind SQL injection...
R-TPT: Improving Adversarial Robustness of Vision-Language Models through Test-Time Prompt Tuning
Vision-language models VLMs, such as CLIP, have gained significant popularity as foundation models, with numerous fine-tuning methods developed to enhance performance on downstream tasks. However, due to their inherent vulnerability and the common practice of selecting from a limited set of...
Strengthen Security with Cyber Risk Advisory
In today’s fast-paced digital world, cyber threats are constantly evolving. Attackers are leveraging advanced techniques and artificial intelligence AI to exploit vulnerabilities, leaving organizations vulnerable to breaches and disruptions. To combat these challenges, organizations must stay...
CVE-2025-32993
Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password aka index.php?/home/forgot-password visusername parameter. Authentication is not needed...
PT-2025-16290 · Unknown · Vision Helpdesk
Name of the Vulnerable Software and Affected Versions: Vision Helpdesk versions 5.7.0 and earlier Description: The issue allows Time-Based Blind SQL injection via the vis username parameter in the Forgot Password feature, also known as index.php?/home/forgot-password. No authentication is require...
CVE-2025-32993
Vision Helpdesk (versions ≤5.7.0) is vulnerable to a Time-Based Blind SQL injection in the Forgot Password endpoint (index.php?/home/forgot-password) via the vis_username parameter, with unauthenticated access. Affected component is the Forgot Password flow; root cause is improper handling of the...