9779 matches found
CVE-2022-49054 Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...
CVE-2022-49054 Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...
CVE-2022-49054
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...
CVE-2022-49054
CVE-2022-49054 concerns the Linux kernel hv/vmbus subsystem. The documented fix deactivates the sysctl_record_panic_msg by default in isolated Hyper-V guests, to prevent hv_panic_page from leaking guest-sensitive information. It also notes that hv_panic_page may contain sensitive data and should ...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that hvpanicpage may contain sensitive information that should not be dumped to Hyper-V in isolated...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the hvinitclocksource function of the hyper-v clock source being incorrectly exported...
CVE-2022-49726: Use of Uninitialized Resource
In the Linux kernel, the following vulnerability has been resolved: clocksource: hyper-v: unexport init-annotated hvinitclocksource EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The...
CVE-2024-57685: Improper Neutralization of Special Elements used in a Command
An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file...
CVE-2025-25960
The phpcmsv9 content management system (version 9.6.3 ) is susceptible to a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit this flaw via the menu interface of the member center within the background administrator panel to escalate privileges . To mitigate this risk, users...
USN-7277-1 linux-aws, linux-azure, linux-gcp, linux-oracle, linux-raspi, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...
USN-7276-1: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...
PT-2025-14358
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang issue in the kdump kernel has been resolved when running on Hyper-V Gen 2 VMs. The problem occurs when the hyperv fb driver moves the framebuffer to a different MMIO address due t...
CVE-2025-25991
The content management system hooskcms v.1.7.1 is susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can exploit the /install/index.php component to obtain sensitive information . While the vulnerability is confirmed, there is currently no information regarding a newer vers...
CVE-2024-12673
CVE-2024-12673 describes an improper privilege vulnerability in the BIOS customization feature of Lenovo Vantage on SMB notebook devices, allowing a local attacker to elevate privileges. Affected products include Lenovo V Series (Gen 5), ThinkBook 14 (Gen 6, 7), ThinkBook 16 (Gen 6, 7), and Think...
CVE-2024-51376
The yeqifu carRental software (v.1.0) contains a Directory Traversal vulnerability (CWE-22) within the file/downloadFile.action?path= component. This flaw allows a remote attacker to traverse the file system to obtain sensitive information and access confidential data. No patch is currently avail...
PT-2025-14359
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory mapping leak occurs in the Linux kernel when a Hyper-V DRM device is removed. The driver allocates MMIO space for the vram and maps it cacheable when the device is probed...
About Elevation of Privilege – Windows Hyper-V NT Kernel Integration VSP (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335) vulnerability
About Elevation of Privilege - Windows Hyper-V NT Kernel Integration VSP CVE-2025-21333, CVE-2025-21334, CVE-2025-21335 vulnerability. These three vulnerabilities were disclosed as part of Microsoft's January Patch Tuesday and share the same description. They were found in a component used for...
CVE-2022-41875
A remote code execution RCE vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE remote code execution on the attacked system running Optica. The vulnerability was patched in v...