CVE-2024-23918

CVE-2024-23918 affects Intel Xeon processors with SGX, due to an improper conditions check in memory controller configurations that could enable local privilege escalation. Public technical details in connected documents indicate a memory-controller–related flaw with SGX, and remediation is via m...

CVE-2024-23918

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23918

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23918

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23918

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-8936

CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory...

CVE-2024-8933

CVE-2024-8933 affects Schneider Electric Modicon M340, MC80, and Momentum Unity M1E controllers. The issue is improper enforcement of message integrity during transmission in a communication channel (CWE-924) and related authentication concerns (CWE-290) that could allow retrieval of a password h...

kernel: scsi: mpt3sas: Fix use-after-free warning

A user after-free vulnerability was found in the Linux kernel in the refcountt variable when performing the controller reset. This issue could lead to denial of service of the system...

PT-2024-30282 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a possible cross-user media read due to a confused deputy in the EditUserPhotoController. This could lead to local...

Intel SGX driver 安全漏洞

Intel SGX driver is an SGX Intel Software Security Extensions driver from Intel Corporation USA. A security vulnerability exists in Intel SGX driver that originates from an improper condition check in the memory controller configuration. An attacker can exploit the vulnerability to elevate...

PT-2024-35370 · Jenkins · Jenkins Script Security Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1367.vdf2fc45f229c and earlier, except 1365.1367.va 3b b 89f8a 95b and 1362.1364.v4cf2dc5d8776 Description: The issue concerns a method implementing form validation that does not perform a permission...

Schneider Electric Modicon M340 缓冲区错误漏洞

The Schneider Electric Modicon M340 is a mid-range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric France. The Schneider Electric Modicon M340 suffers from a buffer error vulnerability that originates from improperly constrained memory buffer...

Jenkins plugin Script Security 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

XINJE XD5E和XINJE XL5E 安全漏洞

XINJE XD5E and XINJE XL5E are both products of China XINJE Corporation.XINJE XD5E is a PLC.XINJE XL5E is a PLC. A security vulnerability exists in the XINJE XD5E and XINJE XL5E version 3.5.3b that originates from a vulnerability that allows an attacker to cause a denial of service via a specially...

PT-2024-20174

Name of the Vulnerable Software and Affected Versions Intel Xeon processor affected versions not specified Description The issue is related to an improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX. This may allow a privileged user to...

Qualcomm Bluetooth Controller Vulnerability - Lenovo Support US

No description provided...

kernel: ACPI: EC: Fix oops when removing custom query handlers

A flaw was found in the Linux kernel's ACPI Embedded Controller EC subsystem. When removing custom query handlers, a kernel oops can occur if the handler is still being executed in the EC query workqueue while the module containing the callback function is being unloaded. The fix ensures the...

kernel: clk: tegra: tegra124-emc: Fix potential memory leak

In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak The tegra and tegra needs to be freed in the error handling path, otherwise it will be leaked...

kernel: x86/apic: Don't disable x2APIC if locked

In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and Extended APIC or x2APIC. X2APIC mode is mostly compatible with legacy APIC, but it disables the memory-mapped APIC interface in favor...

kernel: Bluetooth: btrtl: fix out of bounds memory access

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtekdata'. If btrtl driver is used with btusb, then memory for private hci data is...