151 matches found
CVE-2026-50218
The Akamai GPA (Guardicore Platform Agent) client on all platforms before version 7.4 is vulnerable to an issue where it improperly validates JWT tokens used for seeding. An attacker can exploit this by tricking a user into interacting with a malicious link to provide a spoofed JWT token . This a...
PT-2026-113652
Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...
EUVD-2026-100834
Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...
EUVD-2026-100833
A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent GPA allows a local low-privileged user to cause a denial of service system crash / BSOD via an outbound ICMPv6 packet containing an IPv6 Hop-by-Hop extension header. When the IPv6 ICMP redirect...
PT-2026-113651
A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent GPA allows a local low-privileged user to cause a denial of service system crash / BSOD via an outbound ICMPv6 packet containing an IPv6 Hop-by-Hop extension header. When the IPv6 ICMP redirect...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86 – Check for nEPT/nNPT in slow flush hypercalls The check for isguestmodevcpus is incorrect, because the translatenestedgpa function is only valid if a L2 guest is running with nested EPT/NPT enabled. Instead, use the...
UBUNTU-CVE-2026-46131
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hypercalls Checking isguestmodevcpu is incorrect, because translatenestedgpa is only valid if an L2 guest is running with nested EPT/NPT enabled. Instead use the same condition as...
CVE-2026-46131
CVE-2026-46131 affects the Linux kernel KVM x86 code. The issue is a faulty check in slow flush hypercalls where is_guest_mode(vcpu) was used incorrectly; translate_nested_gpa() is only valid when an L2 guest runs with nested EPT/NPT enabled, so the condition should match translate_nested_gpa() i...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mshv: Fixed an infinite fault loop that occurred during GPA intercepts when permissions were denied. This issue prevents infinite fault loops when guests access memory regions without proper permissions. Currently,...
SUSE CVE-2026-43096
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when guests access memory regions without proper permissions. Currently, mshvhandlegpaintercept attempts to remap pages for all faults...
CVE-2026-43096: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when guests access memory regions without proper permissions. Currently, mshvhandlegpaintercept attempts to remap pages for all faults...
CVE-2021-33101
Uncontrolled search path in the IntelR GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-41934
Improper access control in some IntelR GPA software before version 2024.3 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-43748
Improper access control in some IntelR GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-40071
Improper access control in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-11551: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
PT-2025-41446
Name of the Vulnerable Software and Affected Versions Student Result Manager version 1.0 Description A flaw exists in Student Result Manager version 1.0 that allows for remote execution of SQL injection attacks. The issue stems from manipulating the roll, name, or gpa arguments within the...
EUVD-2021-19816
Malware in sbrugna...