The vulnerability of the SEV-SNP and SEV-ES security mechanisms in Linux operating systems allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the SEV-SNP and SEV-ES protection mechanisms in Linux operating systems is related to incorrect neutralization of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and...

The vulnerability of microprogrammed network devices from Google Nest Wifi, related to the occurrence of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogrammed network devices from Google Nest Wifi relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the SEV-SNP and SEV-ES mechanisms in Linux operating systems allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the SEV-SNP and SEV-ES mechanisms in Linux operating systems stems from incorrect neutralization of special elements in the output data used by the incoming component. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the...

The vulnerability of the fromNatlimit function (/goform/Natlimit) in the Tenda F1202 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromNatlimit function /goform/Natlimit in the Tenda F1202 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

CVE-2023-40704

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...

The OpenSearch reporting plugin improperly controls tenancy access to reporting resources

Summary An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessing resources in a private tenant, leading to potential data being revealed. Impact The lack of...

The vulnerability of the Symptom Framework data collection framework for operating systems iPadOS and iOS allows attackers to compromise the integrity of protected information.

The vulnerability of the Symptom Framework data collection framework for operating systems iPadOS and iOS exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to compromise the integrity of protected information...

ROS-20240716-01

OpenSearch software package vulnerability related to unintentional access to resources of of users in the Dashboards Reports plugin. Exploitation of the vulnerability could allow an attacker to compromise the integrity of data. impact data integrity OpenSearch software package vulnerability relat...

PT-2024-41486 · Gnu · Linux

Уязвимость функции udmabuf vm fault драйвера udmabuf drivers/dma-buf/udmabuf.c ядра операционных систем Linux связана с нарушением подсчёта количества ссылок на страницы, отображённые в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на целостность данных или вызват...

ROS-20240709-01

Vulnerability of the function UnicodeString::doAppend unistr.cpp of the International Components for Unicode library is related to integer overflow of the data structure. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to sensitive data, cause...

Siemens SIPROTEC 5 devices weak encryption vulnerability

SIPROTEC 5 devices offer a range of integrated protection, control, measurement and automation functions for substations and other applications. A weak cryptography vulnerability exists in Siemens SIPROTEC 5 devices due to affected devices supporting weak cryptography on multiple ports 443/tcp fo...

ChuanhuChatGPT Resource Management Error Vulnerability

ChuanhuChatGPT is a lightweight and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A resource management error vulnerability exists in ChuanhuChatGPT version 20240410, which originates from allowing any user to arbitrarily restart the server by sending a specific...

The vulnerability of the Mozilla Firefox browser for Android, related to deficiencies in access control, allows attackers to bypass security restrictions and compromise the integrity of protected information.

The vulnerability of the Mozilla Firefox browser for Android is related to deficiencies in access control, resulting from incorrect processing of the Principal object when opening new tabs. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and compromise the...

ROS-20240704-08

A vulnerability in the curl program line utility is related to the storage of HSTS data in a file with a too long name, curl can delete the entire contents, causing subsequent requests using the file to be unaware of the HSTS status they should have used. file will be unaware of the status of the...

ROS-20240704-28

A vulnerability in the curl program line utility is related to the storage of HSTS data in a file with a too long name, curl can delete the entire contents, causing subsequent requests that use the file to be unaware of the HSTS status they should have used. file will be unaware of the status of...

CVE-2024-5712

A Cross-Site Request Forgery CSRF vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings,...

The vulnerability of the App component of application management tools and Flatpak environments allows attackers to compromise data integrity.

The vulnerability of the App tool component for managing applications and Flatpak environments is related to the elevation and concealment of permissions. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

The vulnerability of the SpiceDB database management system, related to improper storage of permissions, allows a perpetrator to compromise data integrity.

The vulnerability of the SpiceDB database management system is related to the improper storage of permissions. Exploiting this vulnerability allows a malicious actor to influence data integrity through the CheckPermission parameter...

The vulnerability of the Share component in the cloud software for creating and using Nextcloud Server’s data storage system allows a attacker to compromise the integrity of the data or cause service failures.

The vulnerability of the Share component in the cloud software for creating and using Nextcloud Server storage involves the sending of requests to delete old versions of files that could only be accessed with read permissions. Exploiting this vulnerability allows a malicious actor to compromise...

ROS-20240627-04

A vulnerability in the ioctl component of the Flatpak application and environment management tool is related to copying text from the virtual console and pasting it into the command buffer, from which the command can be run after exiting the Flatpak application. Exploitation of the vulnerability...