CVE-2024-53135 KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

PT-2024-10590 · Unknown · Libmpeg2Dec

Name of the Vulnerable Software and Affected Versions: libmpeg2dec affected versions not specified Description: The issue is related to a possible out-of-bounds OOB read in the impeg2d bit stream flush function of libmpeg2dec due to a missing bounds check. This could lead to a remote Denial of...

PT-2024-8792 · Vmware · Vmware Aria Operations

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations affected versions not specified Description: The issue is related to a stored cross-site scripting vulnerability in VMware Aria Operations. This vulnerability can be exploited by a malicious actor with editing access to...

DEBIAN-CVE-2024-50173

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

PT-2024-33832

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an integer overflow in BLKSECDISCARD, which can cause a near infinite loop inside blkdev issue secure erase. This occurs when a specific ioctl call is made with...

Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9245 Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-6728 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to a lack of warning about dangerous actions in the Microsoft Office Visio graphic editor, which is part of Microsoft Office and Microsoft 365 Apps for...

PT-2024-6844 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This could allow an attacker to affect the system. Recommendations: At the moment, there i...

PT-2024-30891 · Nicejob · Nicejob

Name of the Vulnerable Software and Affected Versions: NiceJob versions prior to 3.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS on web pages created by NiceJob...

CVE-2024-45024

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We recently made GUP's common page table walking code to also walk hugetlb VMAs without most hugetlb special-casing, preparing for the future of having less hugetlb-specific page tab...

CVE-2024-45024

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We recently made GUP's common page table walking code to also walk hugetlb VMAs without most hugetlb special-casing, preparing for the future of having less hugetlb-specific page tab...

CVE-2024-45024

CVE-2024-45024 relates to a Linux kernel Hugetlb PT locking issue fixed by aligning huge page table locking with core-mm PT walkers. The root cause: during GUP’s shared page-table walking, hugetlb folios spanning multiple PTEs could be locked using PTE table locks (pte_offset_map_lock) while core...

PT-2024-38721 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: A security issue has been identified in Prisma Access Browser. For more information, refer to the monthly vulnerability updates. Recommendations: At the moment, there is no...

PT-2024-7323 · Intel +1 · Intel Uefi Firmware +1

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in the UEFI firmware of certain Intel processors. This flaw may allow a privileged user to potentially enable escalation of...

PT-2024-6242 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Windows Kernel-Mode Driver, which can be exploited to disclose protected information. This allows...

CVE-2024-42531

Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets with a specific set of URLs that can be used to redirect the camera feed. NOTE: the vendor's perspective is that the Anonymous120386 sample code can establi...

CVE-2024-42531

Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets with a specific set of URLs that can be used to redirect the camera feed. NOTE: the vendor's perspective is that the Anonymous120386 sample code can establi...

CVE-2024-42531

Ezviz CS-CV246 (D15655150) IP camera vulnerability CVE-2024-42531 allows an unauthenticated host to access the live video stream by crafting RTSP requests/URIs to redirect the feed. Root cause: improper handling of RTSP packet sequences enabling feed redirection. Affected versions include V5.3 (b...

PT-2024-30014 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System affected versions not specified Description: A Cross-Site Request Forgery CSRF issue in the admin room removed.php component of the Hotel Management System allows attackers to escalate privileges. No information is...