Siemens SIMATIC RTLS Locating Manager Data Authenticity Validation Insufficiency Vulnerability

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. Siemens SIMATIC RTLS Locating Manager suffers from a Data Authenticity Validation Insufficiency vulnerability due to an affecte...

CVE-2024-25743

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES...

CVE-2024-25743

CVE-2024-25743 : The Linux kernel up to 6.9 is reported vulnerable to untrusted hypervisor interrupt injection (virtual interrupts 0 and 14) that can trigger a SIGFPE in userspace. The issue affects AMD SEV-SNP and AMD SEV-ES environments. The provided connected documents confirm the vulnerabilit...

CVE-2024-25743

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES...

USN-6768-1: GLib vulnerability

Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privilege escalation...

USN-6768-1 glib2.0 vulnerability

Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privilege escalation...

DEBIAN-CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

CVE-2024-34397

GLib vulnerability CVE-2024-34397: a GDBus signal-subscription spoofing flaw allows non-trusted local users on shared systems to inject spoofed D-Bus signals, potentially making a GDBus client misbehave (application-dependent impact). Affected: GLib’s GDBus-based clients; vulnerable in GLib up to...

UBUNTU-CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

PT-2024-3999 · Gnome +9 · Gnome Glib +9

Name of the Vulnerable Software and Affected Versions: GNOME GLib versions prior to 2.78.5 GNOME GLib versions 2.79.x GNOME GLib versions 2.80.x prior to 2.80.1 Description: An issue was discovered in GNOME GLib where a GDBus-based client subscribing to signals from a trusted system service, such...

CVE-2024-23354

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354 Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354 Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354

CVE-2024-23354 is a memory-corruption issue in Qualcomm chipsets triggered when an IOCTL is interrupted by a signal. Documented in Qualcomm security bulletins and reflected across sources (NVD, RH, CNNVD, OSV). The records do not specify affected models/versions or a confirmed patch; exploitation...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is interrupted by a signal...

PT-2024-19833 · Qualcomm · Snapdragon +72

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when an IOCTL call is interrupted by a signal. There is no information provided about the estimated...

Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsoft Office to deliver Cobalt Strike on compromised systems. The attack chain, which took place at the end of 2023 according to Deep Instinct, employs...

Elber Wayber Analog/Digital Audio STL 4.00 Insecure Direct Object Reference Vulnerability

Elber Wayber Analog/Digital Audio STL version 4.00 suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected...

PT-2024-9333 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence platform affected versions not specified Description: The issue allows an attacker to access information that would otherwise be restricted under certain conditions. This has a low impact on...

Linksys RE7000 Command Injection Vulnerability

The Linksys RE7000 is a wireless signal extender from Linksys USA. The Linksys RE7000 suffers from a command injection vulnerability that stems from the AccessControlList parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...