13080 matches found
CVE-2024-58104
The CVEs CVE-2024-58104 and CVE-2024-58105 describe a local privilege bypass in Trend Micro Apex One Security Agent Plug-in User Interface Manager that could allow an attacker with low-privilege code execution to bypass security and run arbitrary code on affected installations. Exploitation is de...
Trend Micro Apex One 安全漏洞
Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that originates from a local attacker executing arbitrary code bypassing existing security measures...
CVE-2024-58104: Improper Privilege Management
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the...
CVE-2024-58105: Incorrect User Management
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. This CVE address an addtional bypass not covered in CVE-2024-58104. Please note: an attacker mus...
Trend Micro Apex One 安全漏洞
Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that originates from a local attacker executing arbitrary code bypassing existing security measures...
Linux kernel dcn10_cm_common Heap Buffer Overflow DoS
The vulnerability of the cmhelpertranslatecurvetodegammahwformat function in the drivers/gpu/drm/amd/display/dc/dcn10/dcn10cmcommon.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
[SECURITY] Fedora 42 Update: dotnet8.0-8.0.114-1.fc42
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
OESA-2025-1307 linux-firmware security update
This package contains firmware images required by some devices. Security Fixes: Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a...
PT-2025-42831
Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for macOS versions prior to 11.8.1400 Trend Micro Antivirus for macOS versions prior to 11.9.36 Description The issue concerns insecure privilege management within Trend Micro Antivirus. Successful exploitation may allow ...
Linux AMD Display Clock Manager Buffer Overflow DoS
The vulnerability of the dcn3clkmgrconstruct function in the drivers/gpu/drm/amd/display/dc/clkmgr/dcn30/dcn30clkmgr.c module of the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability may allow an attacker to cause a service failure...
AMD GPU Direct Rendering Infrastructure DRI DoS
The vulnerability of the dcn20getdcccompressioncap function in the drivers/gpu/drm/amd/display/dc/resource/dcn20/dcn20resource.c driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
wamr:wasm_mutator_fuzz_loader: Heap-buffer-overflow in wasm_loader_prepare_bytecode
Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5114749125984256 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE ...
GHSA-RM69-WVPV-R2W7 Kedro allows Remote Code Execution by Pulling Micro Packages
In kedro-org/kedro version 0.19.8, the pullpackage API function allows users to download and extract micro packages from the Internet. However, the function projectwheelmetadata within the code path can execute the setup.py file inside the tar file, leading to remote code execution RCE by running...
Linux kernel Phantom Plane DoS
The vulnerability of the enablephantomplane function in the drivers/gpu/drm/amd/display/dc/dml2/dml2mallphantom.c kernel of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Security update for orc
This update for orc fixes the following issues: CVE-2024-40897: Fixed a stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files bsc1228184 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
restore_planes_and_stream_state() function in the Data Compromise
The vulnerability of the restoreplanesandstreamstate function in the drivers/gpu/drm/amd/display/dc/core/dc.c kernel of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...
WebAssembly Micro Runtime Heap Buffer Overflow DoS
The vulnerability of the blocktypegetarity function in the core/iwasm/interpreter/wasm.h file, within the WebAssembly environment for WebAssembly Micro Runtime applications WAMR, involves reading beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to...
AMD CPU ROM system loader Data Compromise
The vulnerability of AMD CPU ROM microprogramming software’s loader is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
AMD IOMMU Memory Management Block
The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems is related to incorrect input of configuration data. Exploiting this vulnerability can allow attackers to circumvent security restrictions and compromise the integrity of protected information...
System Management Mode SMM Code Execution
The vulnerability of the System Management Mode SMM mode of AMD microprogramming processors is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...