CVE-2023-30571

Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask call inside archivewritediskposix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race...

SUSE CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

DEBIAN-CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

UBUNTU-CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

CVE-2023-2898

A null-pointer dereference flaw was found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This issue may allow a local privileged user to cause a denial of service...

CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

Fedora 38 : microcode_ctl (2023-6846a1db56)

"The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6846a1db56 advisory. - Update to upstream 2.1-40. 20230516 - Addition of 06-6c-01/0x10 ICL-D B0 microcode at revision 0x1000230; - Addition of 06-8f-04/0x87 SPR-SP E0/S...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:2289-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2289-1 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382 - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Produc...

K000134726: Intel QAT Engine for OpenSSL vulnerability CVE-2022-43507

Security Advisory Description Improper buffer restrictions in the IntelR QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access. CVE-2022-43507 Impact There is no impact; F5 products are not affected by this...

WordPress Plugin Extra Block Design, Style, CSS for ANY Gutenberg Blocks 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2023-2679

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-2679

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-30438

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...

Code injection

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-2679 Data leakage in Adobe connector for SPE edition of SLM

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-2679 Data leakage in Adobe connector for SPE edition of SLM

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data...

CVE-2023-30438 IBM PowerVM gain access

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...

CVE-2023-30438 IBM PowerVM gain access

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...

PT-2023-22692 · Ibm · Powervm

Name of the Vulnerable Software and Affected Versions: PowerVM on IBM Power9 and Power10 systems affected versions not specified Description: An internally discovered issue in PowerVM could allow an attacker with privileged user access to a logical partition to perform an undetected violation of...