Intel Alias Checking Trusted Module Privilege Escalation

The vulnerability of the Intel Alias Checking Trusted Module Intel ACTM, a microprogramming software component of Intel’s 4th and 5th generation processors, relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow attackers to enhance their...

Intel Alias Checking Trusted Module Privilege Escalation

The vulnerability of the Intel Alias Checking Trusted Module Intel ACTM, a microprogramming software component of Intel’s 4th and 5th generation processors, is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to increase their...

LibJXL security vulnerabilities

LibJXL is a reference implementation of PEG XL encoder and decoder in the LibJXL open source. A security vulnerability exists in LibJXL that stems from improper boundary checking by the JPEG decoder when handling JPEG recompression, which could lead to out-of-bounds writes in the event that...

CVE-2024-37044 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

Out-of-bounds Access

libarchive.so is vulnerable to Out-of-bounds Access. The vulnerability is due to insufficient bounds checking in the executefilteraudio function within archivereadsupportformatrar.c, which allows the src pointer to move beyond the dst pointer when processing crafted archive files...

Unspecified vulnerability in Linux kernel (CNVD-2024-46415)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper boundary checking in the filemapread function. No details of the vulnerability are provided at this...

Unspecified vulnerability in Linux kernel (CNVD-2024-46453)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of error checking for xastore. No details of the vulnerability are provided at this time...

RHEL 8 : webkit2gtk3 (RHSA-2024:9653)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9653 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Memory corruption issue wh...

Security Bulletin: AIX is vulnerable to a denial of service due to ISC BIND

Summary Multiple vulnerabilities in ISC BIND could allow a remote attacker to cause a denial of service CVE-2024-0760, CVE-2024-1737, CVE-2024-4076, CVE-2024-1975. AIX uses ISC BIND as part of its DNS functions. Vulnerability Details CVEID:CVE-2024-0760 DESCRIPTION: ISC BIND is vulnerable to a...

CVE-2024-11495

Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking...

CVE-2024-11495

Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking...

CVE-2024-11495 Buffer overflow in OllyDbg

Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking...

CVE-2024-11495

CVE-2024-11495 describes a buffer overflow in OllyDbg 1.10 caused by lack of proper bounds checking, enabling a local attacker to execute arbitrary code. Multiple sources (NVD, CVE record) confirm a local-exploit scenario with high impact, consistent with a serverless/hosted debugger context. The...

CVE-2024-11495 Buffer overflow in OllyDbg

Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking...

Moodle security vulnerabilities

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a relatively laxity in the password checking logic, where certain...

Microsoft OllyDBG buffer error vulnerability

Microsoft OllyDBG is an application from Microsoft Corporation USA. Microsoft's 32-bit assembly debugger. A buffer error vulnerability exists in Microsoft OllyDBG version 1.10 that stems from a lack of proper boundary checking. An attacker exploiting this vulnerability could execute arbitrary cod...

CVE-2024-53081

Public technical details (affected product/version/root cause/patch) for CVE-2024-53081 are not provided in the connected documents. Monitor for updates when new information becomes available.

CVE-2024-53045 ASoC: dapm: fix bounds checker error in dapm_widget_list_create

In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: fix bounds checker error in dapmwidgetlistcreate The widgets array in the sndsocdapmwidgetlist has a countedby attribute attached to it, which points to the numwidgets variable. This attribute is used in bounds...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

SUSE CVE-2024-50272

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemapread If the caller supplies an iocb-kipos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemapread enters an...