Fedora: Security Advisory for rust-resctl-demo (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-resctl-bench-2.2.5-3.fc40

resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...

[SECURITY] Fedora 40 Update: rust-resctl-demo-2.2.5-4.fc40

resctl-demo demonstrates and documents various aspects of resource control using self-contained workloads in guided scenarios...

CVE-2024-4817

A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file manageuser.php of the component HTTP Request Parameter Handler. The manipulation of the argument id leads to improper control of resourc...

CVE-2024-4817

CVE-2024-4817 affects Campcodes Online Laundry Management System v1.0, in the HTTP Request Parameter Handler (manage_user.php). The issue is an improper control of resource identifiers caused by unsafely handling the non-validated id parameter, enabling remote exploitation. Publicly disclosed exp...

CVE-2024-4294

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

CVE-2024-4294

The CVE-2024-4294 entry concerns PHPGurukul Doctor Appointment Management System 1.0. Affected component: /doctor/view-appointment-detail.php, where the editid parameter leads to improper control of resource identifiers (IDOR). The vulnerability is described as exploitable remotely, with public d...

The vulnerability of the Pulsar Function Worker module on the cloud platform for distributed messaging and Apache Pulsar streaming involves allowing a hacker to execute arbitrary code.

The vulnerability of the Pulsar Function Worker module on the cloud platform for distributed messaging and Apache Pulsar streaming involves insufficient control over resources with dynamic management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Improper Control Of A Resource Through Its Lifetime

github.com/cosmos/cosmos-sdk is vulnerable to Improper Control of a Resource Through its Lifetime. The x/crisis module is supposed to allow anyone to halt a chain in event of any violation. The vulnerability is caused due to x/crisis module, which does not halt the chain as expected upon an...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

CVE-2023-44295

Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to loss of information, and information disclosure...

Input validation

Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource through its lifetime vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2023-44288

Dell PowerScale OneFS versions 8.2.2.x–9.6.0.x contain an improper resource lifetime control that allows unauthenticated network attackers to cause a denial of service. The root cause is described as improper control of a resource through its lifetime. Impact is DoS; no public exploit details are...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a denial of service in the modem after receiving an RRC setup message...

PT-2023-7542 · 5G Modem · 5G Modem

Name of the Vulnerable Software and Affected Versions: 5G Modem affected versions not specified Description: The issue is related to improper error handling in the 5G Modem, which could lead to a system crash and remote denial of service when receiving malformed RRC messages. No additional...

PT-2023-18316 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Modem when processing an RRC reconfiguration message. No information is provided about the estimated number of potentially...

The vulnerability of the Change and Transport System component of the SAP NetWeaver software integration platform allows a perpetrator to trigger a service failure.

The vulnerability of the Change and Transport System component of the SAP NetWeaver software integration platform is related to the lack of a mechanism for controlling the resources used. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...