CVE-2023-1047

CVE-2023-1047 affects TechPowerUp RealTemp 3.7.0.0, with the vulnerability in the WinRing0x64.sys driver that enables improper initialization. Exploitation requires local access; the issue has been disclosed publicly. Multiple sources confirm this is tied to RealTemp’s use of WinRing0x64.sys and ...

TechPowerUp Ryzen DRAM Calculator 安全漏洞

TechPowerUp Ryzen DRAM Calculator is TechPowerUp's tool for memory overclocking for hardware gamers using AMD Ryzen CPUs. A security vulnerability exists in TechPowerUp Ryzen DRAM Calculator version 1.2.0.5, which stems from a problem with the library WinRing0x64.sys that can lead to incorrect...

PT-2023-16717 · Techpowerup · Techpowerup Ryzen Dram Calculator

Name of the Vulnerable Software and Affected Versions: TechPowerUp Ryzen DRAM Calculator version 1.2.0.5 Description: A critical issue has been found in the library WinRing0x64.sys, affecting some unknown processing. The manipulation leads to improper initialization, requiring local access to...

CVE-2023-1008

A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has...

PT-2023-16685 · Unknown · Filmfd.Sys +1

Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8.17 Description: A denial of service issue affects the IoControlCode Handler component in the filmfd.sys library. The manipulation with the function 0x801120E4 leads to denial of service. An attack must be approache...

CVE-2023-24212

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

Tenda AX3 缓冲区错误漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from a stack overflow vulnerabili...

K22503522: Linux kernel vulnerability CVE-2018-7757

Security Advisory Description Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service memory consumption via many read accesses to files in the /sys/class/sasphy directory, as demonstrat...

SUSE CVE-2008-3906

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string...

SUSE CVE-2008-4863

Untrusted search path vulnerability in BPYinterface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySysSetArgv function...

SUSE CVE-2008-5983

Untrusted search path vulnerability in the PySysSetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv0 argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse...

SUSE CVE-2014-0377

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables...

SUSE CVE-2015-1341

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...

SUSE CVE-2016-7117

Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing...

SUSE CVE-2018-5278

In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e00c. NOTE: the vendor reported that they "have not been able to reproduce the issu...

SUSE CVE-2021-3679

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service...

SUSE CVE-2021-38166

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAPSYSADMIN capability...

SUSE CVE-2022-37706

enlightenmentsys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring...

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service DoS...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-4304 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2022-4304 Source advisory: OSV:GHSA-P52G-CM5J-MJV4...