CVE-2022-31602

The CVE-2022-31602 issue affects NVIDIA DGX A100 firmware SBIOS (IpSecDxe). A local attacker with elevated privileges and a preconditioned heap can trigger an out-of-bounds write in IpSecDxe, leading to code execution, denial of service, data integrity impact, and information disclosure. Affected...

The vulnerability of the Item_args::walk_args function in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Itemargs::walkargs function in the MariaDB database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the suggest_trie_walk() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the suggesttriewalk function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort functions in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Exectimetracker::getloops/Filesorttracker::reportuse/filesort functions in the MariaDB database management system is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the...

The vulnerability of the del_typebuf() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the deltypebuf function in the Vim text editor is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ins_bytes() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the insbytes function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

NVIDIA NVFLARE 代码问题漏洞

NVIDIA NVFLARE is a standalone Python library from NVIDIA, Inc. Designed to support joint learning between parties using their local secure protected data for client-side training, it also includes functionality for coordinating and exchanging the progress of results across all sites to achieve...

The vulnerability of the NVIDIA GPU Display Driver at the ECC level, related to writing beyond the buffer in memory, allows a hacker to cause a system failure and compromise data integrity.

The vulnerability of the NVIDIA GPU Display Driver at the ECC level is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure and compromise data integrity...

GSD-2022-1003239 ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state

ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

pacemaker enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

The vulnerability of many protocols in the Ovation distributed system management framework stems from deficiencies in the authentication process. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of many protocols in the Ovation distributed system management framework is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service...

The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the CMPLink/TCP protocol implementation in the microprogramming software for programmable logic controllers TOYOPUC allows a hacker to execute arbitrary code.

The vulnerability of the CMPLink/TCP protocol implementation in the microprogramming software for programmable logic controllers TOYOPUC is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the Java Runtime Environment software lies in the lack of measures taken to eliminate scipt-related tags on web pages, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Java Runtime Environment software relates to the failure to remove scipt-related tags from web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability in the set of tools provided by Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity.

The vulnerability of the DevTools set of tools for Google Chrome and Microsoft Edge is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker operating remotely to compromise data integrity...

The vulnerabilities of microprogrammed software in programmable logic controllers such as ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 350 PCI ETH are related to authentication process flaws. These flaws allow attackers to gain unauthorized access to protected information or compromise the integrity of that information.

The vulnerabilities of the microprogrammed logic controllers ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 35...

The vulnerability of the streamGetEdgeID function in the Redis database management system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the streamGetEdgeID function in the Redis database management system is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected information or compromise data integrity.

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Oracle Database - Enterprise Edition component of the Oracle Database Server database management system allows a perpetrator to compromise the integrity of data.

The vulnerability of the Oracle Database - Enterprise Edition component of the Oracle Database Server system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerability of the Notification Configuration component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of that data.

The vulnerability of the Notification Configuration component in the Oracle PeopleSoft Enterprise PeopleTools business application exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...