194 matches found
BIT-NODE-2024-22017
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
CBL Mariner 2.0 Security Update: nodejs18 / nodejs / libuv (CVE-2024-22017)
The version of nodejs18 / nodejs / libuv installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-22017 advisory. - setuid does not affect libuv's internal iouring operations if initialized before the call...
CVE-2024-0085
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service...
CVE-2024-0084
The CVE-2024-0084 entry concerns NVIDIA vGPU software for Linux, specifically a vulnerability in the Virtual GPU Manager. The guest OS could perform privileged operations, with potential impacts including information disclosure, data tampering, privilege escalation, and denial of service. Public ...
CVE-2024-0085 CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service...
CVE-2024-0085
CVE-2024-0085 concerns NVIDIA vGPU software for Windows and Linux, where an unprivileged user could perform privileged host operations. Documents consistently describe impact as data tampering, privilege escalation, and denial of service. Red Hat and other sources align on NVIDIA GPU Driver compo...
CVE-2024-0085 CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service...
PT-2024-4360 · Nvidia +1 · Nvidia Vgpu +2
Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Linux affected versions not specified NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to errors in access control, allowing an attacker to execute arbitrary code,...
Hitachi Energy SDM600 安全漏洞
Hitachi Energy SDM600 is a system data manager from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Energy SDM600, which arises from an overly liberal HTTP response header web server setting that allows an attacker to perform privileged operations and access sensitive...
nodejs: setuid() does not drop all privileges due to io_uring
A flaw was found in Node.js, where the setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This issue allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid...
nodejs: setuid() does not drop all privileges due to io_uring
A flaw was found in Node.js, where the setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This issue allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid...
AZL-35899 CVE-2024-22017 affecting package nodejs for versions less than 20.14.0-1
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
UBUNTU-CVE-2024-22017
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
CVE-2024-22017
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js affect IBM Business Automation Workflow
Summary IBM Business Automation Workflow Configuration Editor packages a Node.js runtime. Vulnerabilities have been reported for Node.js. Vulnerability Details CVEID:CVE-2024-21892 DESCRIPTION: Node.js could allow a local authenticated attacker to gain elevated privileges on the system, caused by...
Unspecified Vulnerability in IBM PowerSC
IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. A security vulnerability exists in IBM PowerSC versions 1.3, 2.0 and 2.1, which can be exploited by an attacker to perform privileged operations and retrieve sensitive information...
IBM PowerSC 安全漏洞
IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. A security vulnerability exists in IBM PowerSC versions 1.3, 2.0 and 2.1, which can be exploited by an attacker to perform privileged operations and retrieve sensitive information...
CVE-2023-6929
EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers can bypass authorization, access the hidden resources on the...
Electron Code Issues Vulnerabilities
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML, CSS. A code issue vulnerability exists in Electron. An attacker can...