14629 matches found
CVE-2024-5679
CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...
CVE-2024-5679
CVE-2024-5679 is an Out-of-Bounds Write vulnerability in the Foxboro.sys driver. A local attacker with user access can craft a program/script using an IOCTL to trigger a local denial-of-service or kernel memory leak. Documented impact is local, with high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:...
CVE-2024-5679
CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...
Malicious code in sap-call (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae3c2c5f325fdd688ce4d11cc5817769bd0f903c9d0df96c60c00cd96feb4639 The OpenSSF Package Analysis project identified 'sap-call' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7652 Malicious code in sap-call (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae3c2c5f325fdd688ce4d11cc5817769bd0f903c9d0df96c60c00cd96feb4639 The OpenSSF Package Analysis project identified 'sap-call' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and earlier, which stems fr...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and prior versions, which...
Django Path Traversal vulnerability
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generatefilename without replicating the file-path validations from the parent class, potentially allow directory traversal via certain...
UBUNTU-CVE-2024-22018
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve...
CVE-2024-39330
CVE-2024-39330 affects Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of django.core.files.storage.Storage that override generate_filename() without mirroring the parent’s file-path validations can trigger directory traversal during save(). Built-in Storage subclasses are not affe...
PT-2024-30730
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the handling of CEQEs in the interrupt handler, which can cause the CPU core to stay in interrupt context too long and lead to soft lockup under heavy load. To...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing call to the csdspremove function in the cs35l56hdacommonprobe function error path...
CVE-2024-38330 IBM i privilege escalation
IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227...
PT-2024-27946 · Ibm · Ibm System Management For I
Name of the Vulnerable Software and Affected Versions: IBM System Management for i versions 7.2 through 7.4 Description: The issue allows a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrat...
CVE-2024-23372
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size...
CVE-2024-21469
Memory corruption when an invoke call and a TEE call are bound for the same trusted application...
CVE-2024-21469
CVE-2024-21469 is mapped to Qualcomm TZ Secure OS / embedded platform where memory corruption occurs when an invoke call and a TEE call are bound to the same trusted application. The Red Hat/Qualcomm/PT-Security entries describe the issue as memory corruption with potential for arbitrary code exe...
CVE-2024-21469 Permissions, Privileges, and Access Control issues in TZ Secure OS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application...
