Fedora 41 : webkitgtk (2024-b142cc07d0)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b142cc07d0 advisory. Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent fi...

HPESBGN04745 rev.1 - HPE Unified OSS Console (UOC) and Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Arbitrary file upload; Remote: Denial of Service DoS, Disclosure of Information, Arbitrary file upload, Unquoted Search Path SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21958

CVE-2024-21958 concerns the AMD Provisioning Console, where incorrect default ACL permissions in the installation directory enable a local attacker with low privileges to escalate privileges, potentially achieve arbitrary code execution. The AMD bulletin describes the root cause as the installati...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21957

The CVE-2024-21957 entry documents an issue in AMD Management Console: incorrect default ACL permissions in the installation directory could enable privilege escalation and potentially arbitrary code execution. Sources detail the affected product as AMD Management Console (AMC) and describe the r...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

kernel: Linux kernel: Denial of Service via use-after-free in vc_screen

A flaw was found in the Linux kernel. A local user can exploit a use-after-free UAF vulnerability in the vcscreen component. This occurs because a pointer to the vcdata structure is not reloaded after a console unlock operation, leading to the use of freed memory. Successful exploitation of this...

kernel: tty: fix out-of-bounds access in tty_driver_lookup_tty()

An out-of-bounds access was found in the TTY subsystem. When an invalid console device is specified on the kernel command line e.g., console=tty3270, the driver lookup returns a TTY struct with an invalid index, causing a crash during boot...

PT-2025-25867

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.137 Description A problem has been identified in the Linux kernel where a sleeping function is called from an invalid context. This issue occurs when the console lock function is called while holding a...

AMD Provisioning Console 安全漏洞

AMD Provisioning Console is an application from UltraMicroelectronics AMD that is used to create configuration packages to configure systems that support AMD Integrated Management Technology AIM-T. AMD Provisioning Console has a security vulnerability that stems from incorrect default permissions...

PT-2024-16121 · Tibco · Tibco Operational Intelligence +1

Name of the Vulnerable Software and Affected Versions: TIBCO Hawk and TIBCO Operational Intelligence affected versions not specified Description: A Cross-Site Scripting XSS vulnerability is present in mar.jar and monitoringconsolecommon.jar. This issue allows for potential system manipulation,...

AMD Management Console Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9003 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within AMD Management Console Software. AMD Management Console AMC is a GUI-based manageability...

Privileged escalation via crafted use of portcfg command

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...

PT-2024-19126 · Amd · Management Console

Name of the Vulnerable Software and Affected Versions: AMD Management Console affected versions not specified Description: The issue is related to incorrect default permissions in the AMD Management Console installation directory, which could allow an attacker to achieve privilege escalation,...