ROS-20240911-06

A vulnerability in the stack protection feature of the GNU Compiler Collection GCC for different programming languages is due to a data protection mechanism violation. Collection GCC is related to a breach of the data protection mechanism. Exploitation of the vulnerability could allow an attacker...

VulnCheck KEV: CVE-2024-38226

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files...

Intel chipset lock-up DoS

The vulnerability of the chipset lock-up mechanism for certain models of Intel processors is related to a failure in the protection mechanism. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2022-4539 Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass

The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2022-4536 IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2022-4536 IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2024-39836: Protection Mechanism Failure

Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0 and 9.8.x = 9.8.2 fail to ensure that remote/synthetic users cannot create sessions or reset passwords, which allows the munged email addresses, created by shared channels, to be used to receive email notifications and to reset...

CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-24980

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2024-24980

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24980

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-23499

The CVE-2024-23499 entry concerns the Intel 800 Series Ethernet Linux kernel mode driver. Affected component: the Linux kernel mode driver for Intel(R) Ethernet Network Controllers and Adapters E810 Series (pre-28.3). Root cause: Protection mechanism failure in the in-kernel driver that may allow...

CVE-2024-24983

Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-24980

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24980

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24980: Protection Mechanism Failure

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23499: Protection Mechanism Failure

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-24983: Protection Mechanism Failure

Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...