Intel System Resources Defense Disclosure Protected Information

The vulnerabilities of Intel System Resources Defense and Intel System Security software for Intel microprocessors are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by these...

VMware ESXi Workstation Code Execution

The vulnerability of VMware ESXi and VMware Workstation lies in synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2022-49721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handle PLTs. Sometimes it is necessary to use a PLT entry to cal...

Linux Distros Unpatched Vulnerability : CVE-2021-47196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwarding to the driver Preset both receive and...

Intel Driver & Support Assistant Privilege Escalation

The vulnerability of the software for updating Intel Driver & Support Assistant DSA is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2015-1158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The addjob function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes,...

Linux Distros Unpatched Vulnerability : CVE-2015-8366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary...

SIMATIC S7-1200 Web Server Spoofing

The vulnerability of the web server of microprogrammed software-controlled logical controllers SIMATIC S7-1200 is related to errors in authenticating certificates. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...

Intel PROSet/Wireless WiFi Race Situation DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause a service failure...

BioNTdrv.sys Privilege Escalation

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, is related to access control errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system level...

Intel PROSet/Wireless WiFi Race Situation DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2015-8367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object...

K000150204: PostgreSQL vulnerability CVE-2015-3166

Security Advisory Description The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified...

Azure Linux 3.0 Security Update: ant / javapackages-bootstrap (CVE-2021-36373)

The version of ant / javapackages-bootstrap installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-36373 advisory. - When reading a specially crafted TAR archive an Apache Ant build can be made to alloca...

Citrix Provisioning - Unable to add a new server to the Farm

Configuration Wizard shows warnings when admin tries to add a new PVS Server to the Farm. Error displayed: Errors have occured during the configuration process ConfigurationWizard.log located in C:\ProgramData\Citrix\Provisioning Services on the PVS Server shows the errors:...

Advisory ROSA-SA-2025-2752

Software: opensc 0.20.0 OS: ROSA Virtualization 2.1 packageevrstring: opensc-0.20.0-8.rv3 CVE-ID: CVE-2023-2977 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in OpenSC causes a buffer overflow in the pkcs15 cardoshaveverifyrcpackage function, allowing an attacker to cause a processing...

Microsoft AutoUpdate (MAU) Privilege Escalation

The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE CVE-2021-47653

In the Linux kernel, the following vulnerability has been resolved: media: davinci: vpif: fix use-after-free on driver unbind The driver allocates and registers two platform device structures during probe, but the devices were never deregistered on driver unbind. This results in a use-after-free ...

SUSE CVE-2022-49226

In the Linux kernel, the following vulnerability has been resolved: net: asix: add proper error handling of usb read errors Syzbot once again hit uninit value in asix driver. The problem still the same -- asixreadcmd reads less bytes, than was requested by caller. Since all read requests are...

SUSE CVE-2022-49396

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error e.g. probe deferral. Note that due to the reset controller being defined in devicetree in "lane...