Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel Processors that stems from a check time use time contention condition. An attacker could exploit the vulnerability to...

CVE-2024-26648 drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

CLSA-2024-1706698462 java-1.8.0-openjdk: Fix of 6 CVEs

Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue -...

java-1.8.0-openjdk: Fix of 8 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop...

Important: Red Hat Security Advisory: OpenJDK 8u402 security update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

PT-2024-11511 · WordPress · Wp-Invoice

Name of the Vulnerable Software and Affected Versions: WP-Invoice WordPress plugin versions 4.3.1 and earlier Description: The issue is related to the lack of CSRF check when updating settings and insufficient sanitization and escaping in some settings, allowing an attacker to make a logged-in...

CVE-2023-6148 Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

PT-2023-15793 · Wifi · Wifi

Name of the Vulnerable Software and Affected Versions: Wifi service affected versions not specified Description: The issue is related to a missing bounds check in the wifi service, which could lead to a local denial of service with no additional execution privileges needed. This is due to a...

PT-2023-27572 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the Telecom service. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-27565 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...

PT-2023-15792 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a camera driver, where a missing bounds check can lead to a possible out of bounds write. This could result in a local denial of service and requires System...

PT-2023-26424 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local information disclosure with no additional execution privileges. Recommendations:...

PT-2023-26427 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local information disclosure with no additional execution privileges. Recommendations:...

PT-2023-26426 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local information disclosure with no additional execution privileges. Recommendations:...

CVE-2023-40254

The CVE-2023-40254 issue is a Download of Code Without Integrity Check affecting Genians Genian NAC v4.0.0–4.0.155, Genian NAC v5.0.0–5.0.42, Genian NAC Suite v5.0.0–5.0.54, and Genian ZTNA v6.0.0–6.0.15. The root cause is improper integrity verification during software updates, enabling Maliciou...

PT-2023-15266 · Unisoc (Shanghai) Technologies Co. +1 · T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a camera driver, where a missing bounds check can lead to a possible out of bounds read. This could result in a local denial of...

CVE-2023-20731

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573495; Issue ID: ALPS07573495...

CVE-2023-34256

An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4groupdesccsum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend again...

CVE-2023-2494 Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Missing Authorization to Limited Privilege Granting

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processpostdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role...

PT-2023-15748 · Bootcp · Bootcp

Name of the Vulnerable Software and Affected Versions: bootcp service affected versions not specified Description: The issue is related to a missing bounds check in the bootcp service, which could lead to a possible out of bounds write. This might result in a local denial of service and requires...