EUVD-2017-11525

Malware in sbrugna...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ocfs2 module not properly unlocking pages during symbolic link read errors...

CVE-2022-49605

In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGCREMOVED logic and implement it properly The initially merged version of the igc driver code via commit 146740f9abc4, "igc: Add support for PF" contained the following IGCREMOVED checks in the igcrd32/wr32 MMIO...

NVIDIA Container Toolkit Data Compromise

The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...

PHOENIX CONTACT WP 6xxx Hypertext Link Access

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Yandex Privilege Escalation

The vulnerability of the Yandex Browser is related to errors in processing symbolic links when loading the installation file. Exploiting this vulnerability can allow an attacker to increase their privileges...

snapd Hard Link Privilege Escalation

The vulnerability of the ductile management for self-contained packages in Snapd is related to errors in hard links. Exploiting this vulnerability can allow attackers to enhance their privileges...

nginx.ingress.kubernetes.io/auth-type Controller File Name Management

The vulnerability of the nginx.ingress.kubernetes.io/auth-type controller in the Kubernetes ingress-nginx cluster is related to errors in processing hypertext links. Exploiting this vulnerability may allow an attacker to gain access to the ability to create, modify, or delete data...

NVIDIA Graphics Processor Hard Link

The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors relates to errors in handling hard links. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service interruptions...

PT-2020-2894

Name of the Vulnerable Software and Affected Versions Cisco IOx affected versions not specified Description The issue is related to insufficient path restriction enforcement in the Cisco Application Framework component of the Cisco IOx application environment. This could allow an authenticated,...

XSS vulnerability in Subversion Release Manager

Subversion Release Manager 1.2 and earlier does not escape the error message for the Repository URL field form validation. This results in a reflected cross-site scripting vulnerability that can also be exploited similar to a stored cross-site scripting vulnerability by users with Job/Configure...