Siemens network software vulnerabilities related to memory-walking, which allow attackers to cause service failures.

The vulnerability of Siemens network software is related to reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to trigger a Basic Kernel Failure BSOD in Windows systems...

The vulnerability of the NVIDIA GPU Display Driver for Windows software allows a hacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA GPU Display Driver for Windows software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

The vulnerability of the NVIDIA GPU Display Driver for Linux software driver allows a hacker to disclose protected information and cause system failures.

The vulnerability of the NVIDIA GPU Display Driver for Linux software lies in errors related to privilege management. Exploiting this vulnerability can allow attackers to disclose sensitive information and cause service failures...

The vulnerability in the module drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c of the network board driver mvpp2 in the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the MVPP2 network driver on the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

GHSA-CW5R-JX8R-9F7X Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

WordPress Pie Register (Add on) - Social Sites Login Plugin <= 1.7.7 is vulnerable to Broken Authentication

Software Pie Register Add on - Social Sites Login Type Plugin Vulnerable versions = 1.7.7 Fixed in 1.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-4544 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...

The vulnerability of shader functions in VMware Fusion and Vmware Workstation allows attackers to trigger a service failure.

The vulnerability of shader functions in VMware Fusion and Vmware Workstation lies in improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Launch failures after upgrading to CWA 2402

Users on Citrix Workspace App for Windows 2402 and have Real-Time Media Engine RTME installed on endpoint devices older than 2.9.700 may encounter session launch failures...

CVE-2021-47389

The Linux kernel contains a vulnerability in the KVM: SVM virtualization subsystem within the arch/x86/kvm/svm/sev.c module. The issue stems from a missing sev_decommission call during the sev_receive_start operation. According to AMD's SEV API, RECEIVE_START generates a new guest context and mus...

CVE-2024-35988

A vulnerability was found in the Linux kernel affecting the riscv architecture on 64-bit NOMMU systems. The issue stems from an incorrect definition of TASKSIZE, which causes failures in userspace access routines when there is RAM above 4GB. The vulnerability affects the file...

CVE-2024-35988 riscv: Fix TASK_SIZE on 64-bit NOMMU

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access...

CVE-2024-35988 riscv: Fix TASK_SIZE on 64-bit NOMMU

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access...

The vulnerability of the l2cap_chan_timeout() function in the Linux kernel’s Bluetooth subsystem allows a hacker to trigger a service failure.

The vulnerability of the l2capchantimeout function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the swapping of the zero pointer due to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause...

The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP arises from incorrect restrictions on XML links to external objects. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...

CVE-2024-35818 LoongArch: Define the __io_aw() hook as mmiowb()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Define the ioaw hook as mmiowb Commit fb24ea52f78e0d595852e "drivers: Remove explicit invocations of mmiowb" remove all mmiowb in drivers, but it says: "NOTE: mmiowb has only ever guaranteed ordering in conjunction wit...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the existence of a production environment issue that causes reconnection failures...