5125 matches found
[SECURITY] Fedora 39 Update: zabbix-6.0.33-1.fc39
Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...
CVE-2024-45168
An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable...
CVE-2024-45168
An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable...
CVE-2024-27186
The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions...
CVE-2024-27186
CVE-2024-27186 affects Joomla! via the mail template feature lacking an escaping mechanism, enabling XSS vectors across multiple extensions. The vulnerability stems from insufficient input escaping in mail templates, with CVSSv3.1 base score 6.1 (MEDIUM). Affected component: the HTML mail templat...
CVE-2024-6348
Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...
CVE-2024-6348 Predictable seed generation after ECU reset
Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...
CVE-2024-6348 Predictable seed generation after ECU reset
Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...
SUSE CVE-2024-43840
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for BPFTRAMPFCALLORIG When BPFTRAMPFCALLORIG is set, the trampoline calls bpftrampenter and bpftrampexit functions, passing them the struct bpftrampimage im pointer as an argument in R0. The trampoline...
CVE-2024-43834 xdp: fix invalid wait context of page_pool_destroy()
In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of pagepooldestroy If the driver uses a page pool, it creates a page pool with pagepoolcreate. The reference count of page pool is 1 as default. A page pool will be destroyed only when a reference...
CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...
CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...
CVE-2024-24980
Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-24980
Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
DEBIAN-CVE-2024-24980
Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-23499
Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2024-23499
The CVE-2024-23499 entry concerns the Intel 800 Series Ethernet Linux kernel mode driver. Affected component: the Linux kernel mode driver for Intel(R) Ethernet Network Controllers and Adapters E810 Series (pre-28.3). Root cause: Protection mechanism failure in the in-kernel driver that may allow...
CVE-2024-24983
Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...