CVE-2024-58018 nvkm: correctly calculate the available space of the GSP cmdq buffer

In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of the GSP cmdq buffer r535gspcmdqpush waits for the available page in the GSP cmdq buffer when handling a large RPC request. When it sees at least one available page in the cmdq, it...

The vulnerability of Intel Dynamic Tuning Technology (DTT) in system software drivers lies in the ability to disclose information in the erroneous data area, allowing an attacker to enhance their privileges.

The vulnerability of system software drivers related to Intel Dynamic Tuning Technology DTT involves the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2024-32221

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, specifically in the drm/amdgpu component. The issue involves a warning when dereferencing an object for nbio v7 4, and if the ras...

CVE-2024-21866

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request...

The vulnerability of the check_univention_joinstatus component in the Univention Corporate Server operating system allows a hacker to increase their privileges.

The vulnerability of the checkuniventionjoinstatus component in the Univention Corporate Server operating system is related to the disclosure of information in the error-prone data area. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing attackers to exploit it to disclose sensitive information that is protected by security measures.

The vulnerability of the Remote Procedure Call component in the Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

PT-2023-6248 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a broadcast permission control vulnerability in the Bluetooth module. Successful exploitation of this vulnerability can cause the Bluetooth function to be...

PT-2023-6244 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a vulnerability in the Bluetooth module of the HarmonyOS operating system, which is associated with information disclosure in an error data area. It may also invol...

The vulnerability of the XWiki platform, which involves exposing information in the wrong data area, allows a hacker to obtain the email addresses of all users.

The vulnerability of the XWiki Platform lies in the exposure of information in the error data area. Exploiting this vulnerability could allow a malicious actor to obtain the email addresses of all users...

PT-2023-8490 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.5-milestone-1 through 14.10.8 XWiki Platform versions 15.3-rc-1 and earlier Description: The issue is related to the disclosure of information in the error data area of the XWiki Platform, specifically in the...

PT-2023-2839 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: Codesys versions affected versions not specified Description: The issue is related to the disclosure of information in an error data area, potentially allowing a remote attacker to impact data integrity. Recommendations: At the moment, there ...

A vulnerability in the web interface for operating systems ArubaOS, allowing a hacker to read arbitrary files

The vulnerability in the web interface for operating systems ArubaOS relates to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

The vulnerability of the Jenkins HTTP Request Plugin, related to the disclosure of information in the error data field, allows attackers to disclose the protected information.

The vulnerability of the Jenkins HTTP Request Plugin is related to the disclosure of information in the error data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere, related to the disclosure of information in the error data area, allows a intruder to execute arbitrary OS commands.

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere relates to the disclosure of information in the error area of data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary OS commands remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the disclosure of information in the error-prone data area, allows a perpetrator to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to confusion between tag names and branches. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software PoDoFo allows a malicious actor to access confidential data.

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software library is related to the disclosure of information in the error-prone data area. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...

The vulnerability of the Microsoft Message Queuing (MSMQ) service on the Microsoft Windows operating system allows unauthorized access to protected information.

The vulnerability of the Microsoft Message Queuing MSMQ service on the Microsoft Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NFS ONCRPC XDR driver for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the NFS ONCRPC XDR driver for Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

PT-2022-6487

Name of the Vulnerable Software and Affected Versions Git versions through 2.35.1 Description The issue is related to the disclosure of information in the error data area of the distributed version control system Git. This could present a security risk if information-disclosure auditing processes...

PT-2022-1720 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Power BI client JS SDK, associated with the error data area. Exploitation of this issue may allow a remote...