13870 matches found
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uncalled ofnodeput in the mt2701wm8960machineprobe function, resulting in a reference count leak...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a fast string copy instruction error in x86/mce...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not populating the RSB during vmexit to prevent IBRS attacks...
PT-2025-8450
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the ASoC: mediatek component. The problem was related to a missing of node put in the mt2701 wm8960 machine probe function,...
CVE-2024-52939
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write data outside the Guest's virtualised GPU memory...
CVE-2024-47896
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
[SECURITY] Fedora 40 Update: openssh-9.6p1-2.fc40
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users
A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability...
CentOS 9 : openssh-8.7p1-45.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the openssh-8.7p1-45.el9 build changelog. - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious...
Malicious code in twilio-realtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b685743691677bab2a820511e27dea13c5ce9441dbd97ca3a24dca0cb92a8a8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zztest82 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 632d9a2711114ce930c19d98e24aab1daa8d6d2a81f71ef0025260b16442acec Any computer that has this package install...
Malicious code in gslack (npm)
This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72940e36f27a988f3e03f79a6a0ce0cafc2e871808da0318087ed2657454ecf9 Any computer that has this package installed or running...
CVE-2025-1001
Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack MITM. An attacker could modify the server's response and deliver a...
Malicious code in amagi-kanban (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d71615497a724cea51b581b078681fd29f136e4d9338af74fea3692dd35754a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-12577
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
CVE-2024-47896
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
CVE-2024-46975
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory...
CVE-2024-12577
This vulnerability affects Imagination Technologies PowerVR-GPU components. A flaw in the rgxfw_pcset_ungrab() function within the Driver Development Kit (DDK) allows an out-of-range pointer shift when processing the psFWMemContext parameter (specifically via psFWMemContext->uiPageCatBaseRegSe...
CVE-2024-47896
The GPU Driver Development Kit (DDK) is vulnerable to an out-of-bounds write in the rgxfw_hwr_log_info() function within rgxfw_hwr.c. The root cause is an incorrect bounds check when processing the psHWRInfoBuf parameter, specifically via psHWRInfoBuf->ui32WriteIndex. An attacker can exploit t...
