EUVD-2010-2526

Malware in sbrugna...

EUVD-2024-54761

Malicious code in bioql PyPI...

CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

CVE-2024-36348: Exposure of Sensitive Information during Transient Execution

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

AMD SMM Supervisor Vulnerability Security Notice

Bulletin ID: AMD-SB-7011 Potential Impact: Loss of confidentiality, integrity, and availability Severity: High Summary External researchers reported a potential vulnerability during SMM Supervisor initialization which may impact some AMD processors. On systems that do not have Supervisor Mode...

SUSE CVE-2010-2522

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message...

SUSE CVE-2010-2523

Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted 1 NDOPTPREFIXINFORMATION or 2 NDOPTHOMEAGENTINFO packet...

Linux - Use-After-Free via race Between modify_ldt() and #BR Exception

Linux - Use-After-Free via race Between modifyldt and BR Exception / When a BR exception is raised because of an MPX bounds violation, Linux parses the faulting instruction and computes the linear address of its memory operand. If the userspace instruction is in 32-bit code, this involves looking...

CVE-2010-2523

Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted 1 NDOPTPREFIXINFORMATION or 2 NDOPTHOMEAGENTINFO packet...

CVE-2010-2522

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message...

Code injection

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message...

Buffer overflow

Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted 1 NDOPTPREFIXINFORMATION or 2 NDOPTHOMEAGENTINFO packet...

CVE-2010-2522

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message...

CVE-2010-2523

CVE-2010-2523 analyzes a vulnerability in the mipv6d (UMIP 0.4) daemon, where multiple buffer overflows in ha.c can be triggered by crafted ND_OPT_PREFIX_INFORMATION or ND_OPT_HOME_AGENT_INFO packets. Affected product: mipv6d within UMIP 0.4. Root cause: buffer overflows in ha.c when processing s...

CVE-2010-2522

CVE-2010-2522 concerns the mipv6d/UMIP 0.4 stack where the mipv6 daemon does not verify that netlink messages originate from the kernel, enabling local users to spoof netlink socket communication by sending a crafted unicast message. This vulnerability is documented across multiple advisories (op...