CentOS 7 : kpatch-patch (RHSA-2022:1185)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1185 advisory. - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to...

CentOS 7 : kernel (RHSA-2022:5937)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5937 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosu...

CVE-2024-27457

Improper check for unusual or exceptional conditions in IntelR TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-27457

Improper check for unusual or exceptional conditions in IntelR TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-27457

Improper check for unusual or exceptional conditions in IntelR TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-27457

Intel® TDX Module firmware before version 1.5.06 contains an improper check for unusual or exceptional conditions that could enable information disclosure by a privileged local user. The affected component is the Intel TDX Module firmware; the root cause is improper condition checking. The adviso...

CVE-2024-35215

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform SDP versions 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process...

CVE-2024-35215

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform SDP versions 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process...

CVE-2024-34672

Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...

PT-2024-7306 · Intel · Intel Tdx Module

Name of the Vulnerable Software and Affected Versions: Intel TDX Module firmware versions prior to 1.5.06 Description: The issue is related to an improper check for unusual or exceptional conditions in the Intel TDX Module firmware. This may allow a privileged user to potentially enable informati...

PT-2025-11522 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as Command Injection. This could allow a high privileged...

PT-2024-14789 · Unknown · Himed Cockpit 18 Pro +2

Name of the Vulnerable Software and Affected Versions: HiMed Cockpit 12 pro versions 11.5.1 through 11.6.2 HiMed Cockpit 14 pro+ versions 11.5.1 through 11.6.2 HiMed Cockpit 18 pro versions 11.5.1 through 11.6.2 HiMed Cockpit 18 pro+ versions 11.5.1 through 11.6.2 Description: A restricted deskto...

CVE-2024-47975

CVE-2024-47975 concerns improper access control validation in the firmware of Solidigm DC Products. The vulnerability could allow a device with physical access to gain unauthorized access or a local attacker to potentially cause denial of service. The available sources describe the affected produ...

PT-2024-32925 · Solidigm · Solidigm Dc Products

Name of the Vulnerable Software and Affected Versions: Solidigm DC Products affected versions not specified Description: The issue is related to improper access control validation in the firmware of some Solidigm DC Products. This may allow an attacker with physical access to gain unauthorized...

intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors

A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in IntelR CoreTM Ultra processors that may allow an authenticated user to enable a denial of service via local access...

intel-microcode: Race conditions in some Intel(R) Processors

A flaw was found in intel-microcode. The hardware logic contains race conditions in some IntelR processors that may allow an authenticated user to enable partial information disclosure via local access...

CentOS 9 : microcode_ctl-20240910-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20240910-1.el9 build changelog. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information...

CVE-2023-52948

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...

mod_jk: information Disclosure / DoS

An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing modjk configuration, which may lead to information disclosure and denial of service...

kernel: wifi: mt76: replace skb_put with skb_put_zero

A potential flaw was found in the Linux kernel’s MediaTek WiFi, where it was reusing uninitialized data. This flaw allows a local user to gain unauthorized access to some data potentially...