UBUNTU-CVE-2024-50296

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver is uninstalled and the VF is disabled concurrently, a kernel crash occurs. The reason is that the two actions call function pcidisablesriov. The numVFs is check...

CVE-2024-50296 net: hns3: fix kernel crash when uninstalling driver

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver is uninstalled and the VF is disabled concurrently, a kernel crash occurs. The reason is that the two actions call function pcidisablesriov. The numVFs is check...

MAL-2024-10605 Malicious code in @david-lab/sol-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b5dba42ccf786e68c3da9ea3c922e86a77057afd355a7b4534b190ef156e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates in the thermal module, where a warning triggered when uninstalling the module causes PCI devices to be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a failure to properly handle the debug filesystem during ISO initialization, resulting in a double...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from stopping cleaner kthread during uninstallation without waiting for the fixup job to complete, which could lead t...

MAL-2024-9111 Malicious code in navb-pub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec3ef563ba3705d7f1af75365f9a65909856b9829ce20605abd704f2d3abbc1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-8687

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

CVE-2024-8687

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

CVE-2024-8687 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

PT-2024-39177 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: An information exposure issue exists in the software, allowing a GlobalProtect end user to obtain the configured GlobalProtect uninstall password and the configured disabl...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which arises from the exposure of information that allows a GlobalProtect end user to learn the configured GlobalProtec...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates from a timer re-trigger on driver uninstall vulnerability in the Bluetooth: btnxpuart component...

MAL-2024-8665 Malicious code in @diotoborg/ullam-dignissimos-repudiandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f98218a920ef07fe61cbea667aa89a03f97274e5993222143dac9fd29704f347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8333 Malicious code in @diotoborg/facere-cupiditate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9240e310e12ca4380af6dc349441e6f32e009c3b0c87a89d2e16170d54007a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a resource leak in the octeontx2-pf component when the VF driver is uninstalled...

PT-2024-26381 · Cylance · Cylanceoptics

Name of the Vulnerable Software and Affected Versions: CylanceOPTICS for Windows versions 3.2 and 3.3 Description: A tampering vulnerability in the CylanceOPTICS Windows Installer Package could allow an attacker to potentially uninstall CylanceOPTICS from a system, thereby leaving it with only th...

kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

A vulnerability was found in the Linux kernel's HNS3 network driver related to a use-after-free condition in the hclgevfsendmbxmsg function. The issue occurs when the hns3remove function uninstalls a client instance before uninstalling the acceleration engine device, leading to access of freed...

kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

A vulnerability was found in the Linux kernel's HNS3 network driver related to a use-after-free condition in the hclgevfsendmbxmsg function. The issue occurs when the hns3remove function uninstalls a client instance before uninstalling the acceleration engine device, leading to access of freed...