605 matches found
PT-2023-4323 · Linux +7 · Linux Kernel +7
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition...
PT-2023-23079 · Slate · Slate
Name of the Vulnerable Software and Affected Versions: Slate affected versions not specified Description: A missing origin validation in the Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks. Recommendations: At the moment, the...
MGASA-2023-0235 Updated firefox/nss packages fix security vulnerability
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS CVE-2023-37201. Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free in...
ROS-2-1871
2.1871 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...
Rockwell Automation FactoryTalk Services Platform Trust Management Issue Vulnerability
Rockwell Automation FactoryTalk Services Platform is a suite of services platforms from Rockwell Automation that provides routine services for applications such as diagnostic information, health monitoring and real-time data access. A trust management issue vulnerability exists in the Rockwell...
CVE-2023-3238 OTCMS server-side request forgery
A vulnerability, which was classified as critical, has been found in OTCMS up to 6.62. This issue affects some unknown processing of the file /admin/read.php?mudi=getSignal. The manipulation of the argument signalUrl leads to server-side request forgery. The attack may be initiated remotely. The...
The vulnerability of Cisco SD-WAN vEdge router microprogramming software, related to the execution of operations outside the buffer in memory, allows a attacker to cause service failure.
The vulnerability of Cisco SD-WAN vEdge microprogramming software relates to the execution of operations outside the buffer in memory when handling traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PT-2023-3026 · Wago · Wago Cc100 +4
Name of the Vulnerable Software and Affected Versions: WAGO PFC100 versions =16 and =16 and =16 and =16 and =16 and =16 and =16 and =16 and =16 and =16 and =23, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the device...
Code injection
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...
OpenZeppelin 输入验证错误漏洞
OpenZeppelin is a software application. A standard for secure blockchain applications. An input validation error vulnerability exists in OpenZeppelin Contracts. An attacker exploiting this vulnerability could perform arbitrary actions...
PT-2023-2160 · Cisco · Cisco Small Business Rv016 +5
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 affected versions not specified Description: The issue exists due to insufficient protection of the web page structure and insufficient input validation by the web-based...
SUSE CVE-2008-5714
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended...
SUSE CVE-2014-2483
Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is...
JSA10377 - Pulse Policy Secure (PPS): Cross-Site Scripting Vulnerability
Last Modified Date Mar 4, 2024 6:20:09 PM...
IBM Spectrum Virtualize Information Disclosure Vulnerability
IBM Spectrum Virtualize, a block storage virtualization system from International Business Machines IBM, Inc. It improves data value, security and simplicity for new and existing storage infrastructures. IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2 and 7.8 have an information disclosure vulnerabili...
PT-2022-7071 · Tionix · Tionix Virtual Security
Name of the Vulnerable Software and Affected Versions: TIONIX Virtual Security affected versions not specified Description: The issue is related to a lack of protection for service data in the web interface for remote administration of TIONIX Virtual Security, a virtualization information securit...
golang: crypto/elliptic: IsOnCurve returns true for invalid field elements
A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...
The vulnerability of Microsoft Windows Defender operating systems, which allows a hacker to trigger a service failure.
The vulnerability of Microsoft Windows Defender operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
