UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets soter service module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets spipe drive module, which stems from a lack of boundary checking, leading to out-of-bounds writes...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets MP3 encoder module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

PT-2025-26012 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the block layer and the blk-rq-qos framework. The issue occurs when the io.cost.qos file is written by two CPUs...

CVE-2023-27968

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-32233

A use-after-free vulnerability was found in the Netfilter subsystem of the Linux kernel when processing batch requests to update nftables configuration. This vulnerability can be abused to perform arbitrary reads and writes in kernel memory. A local user with CAPNETADMIN capability could use this...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from mishandling of anonymous sets and post-release reuse in Netfilter nftables when processing batch requests, which can be abused to...

PT-2023-18260 · Samsung · Samsung Core Service

Name of the Vulnerable Software and Affected Versions: Samsung Core Service versions prior to 2.1.00.36 Description: The issue is related to improper access control in the Samsung Core Service, allowing an attacker to write arbitrary files in the sandbox. Recommendations: For versions prior to...

Amazon Linux AMI : nss (ALAS-2023-1736)

The version of nss installed on the remote host is prior to 3.53.1-7.88. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1736 advisory. firefox-esr , thunderbird and nss only are affected by this package. CVE-2023-0767 Tenable has extracted the preceding description...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.6.2.5)

The version of AOS installed on the remote host is prior to 6.6.2.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.6.2.5 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header...

PT-2023-14756 · Apache · Apache Streampark

Name of the Vulnerable Software and Affected Versions: Apache StreamPark versions prior to 2.0.0 Description: The issue allows any user to upload a jar as an application without mandatory verification of the uploaded file type. This enables users to upload high-risk files and potentially upload...

EulerOS Virtualization 2.9.1 : multipath-tools (EulerOS-SA-2023-1643)

According to the versions of the multipath-tools packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction...

RIOT RIOT-OS 数字错误漏洞

RIOT RIOT-OS is a set of operating systems used in the Internet of Things IoT space. A numeric error vulnerability exists in versions of RIOT-OS prior to 2022.10. An attacker exploits this vulnerability to send specially crafted frames that result in a large number of out-of-bounds writes beyond...

PT-2023-22823 · Jellyfin · Jellyfin

Name of the Vulnerable Software and Affected Versions: Jellyfin versions 10.8.0 through 10.8.10 Description: The issue is related to a directory traversal vulnerability inside the ClientLogController, specifically /ClientLog/Document. This vulnerability can be combined with a cross-site scripting...

NVIDIA GPU Display Driver 缓冲区错误漏洞

The NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to interactively support the graphics card display module in the operating system. A security vulnerability exists in the NVIDIA GPU Display Driver that originates from a security issue in the kernel mode layer handler...

NVIDIA DGX-2 缓冲区错误漏洞

The NVIDIA DGX-2 is a high-performance workstation for deep learning from NVIDIA, Inc. The NVIDIA DGX-2™ is NVIDIA's first 2 petaFLOPS appliance with 16 NVIDIA V100 Tensor core GPUs, making it an excellent platform for tackling complex AI challenges. A security vulnerability exists in NVIDIA DGX-...

PT-2023-9258

Name of the Vulnerable Software and Affected Versions Gogs versions through 0.13.0 Description The issue is related to argument injection during the previewing of changes, which can allow a remote attacker to execute arbitrary commands. Unprivileged user accounts can write to arbitrary files on t...

CVE-2023-28141

An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, and they may delete or otherwise on unauthorized...

CLSA-2023-1681328662 Fix CVE(s): CVE-2023-0767

SECURITY UPDATE: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled - debian/patches/CVE-2023-0767.patch: improve handling of unknown PKCS12 safe bag types - CVE-2023-0767...