13338 matches found
btrfs DoS
The vulnerability of the btrfs component in Linux operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
firefox: thunderbird: Unhandled Exception in Add-on Signature Verification
The Mozilla Foundation's Security Advisory: The application can fail to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw is triggered by an invalid or unsupported extension manifest and could cause runtime errors that disrupt the...
firefox: thunderbird: Unhandled Exception in Add-on Signature Verification
The Mozilla Foundation's Security Advisory: The application can fail to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw is triggered by an invalid or unsupported extension manifest and could cause runtime errors that disrupt the...
PT-2024-41633
Уязвимость функции imx pgc power up модуля drivers/pmdomain/imx/gpcv2.c ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Intel Distribution for Python Privilege Escalation
The vulnerability in the library set for application development with Intel Distribution for Python is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
BigDL Access Control Privilege Escalation
The vulnerability of BigDL software is related to errors in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...
Intel HID Event Filter driver installer Privilege Escalation
The vulnerability of the Intel HID Event Filter driver installer for Intel NUC laptops is related to inherited permission errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
Linux crypto kernel DoS
The vulnerability of the Linux operating system’s crypto kernel component is related to errors in resource management in the pcryptaeadencrypt function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for Integer Underflow (Wrap or Wraparound) in 7-Zip
CVE-2024-11477 Writeup This is a writeup of my research...
ROS-20241129-02
A vulnerability in the openvswitch component of the Linux operating system kernel is related to incorrect input validation in the parseicmpv6 function in net/openvswitch/flow.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the cppccpufr...
VMware Aria Operations Privilege Escalation
The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Linux clk-mt6797 Component DoS
The vulnerabilities of the functions mtktopckgeninit, mtkinfrasysinitearly, and mtkinfrasysinit of the clk-mt6797 kernel component in Linux operating systems are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow attackers to cause system failures...
CVE-2023-52922 can: bcm: Fix UAF in bcm_proc_show()
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcmprocshow BUG: KASAN: slab-use-after-free in bcmprocshow+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862 CPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 230 Hardwar...
Security update for postgresql15
This update for postgresql15 fixes the following issues: CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference bsc1233323. CVE-2024-10977: Make libpq discard error messages received during SSL or GSS protocol negotiatio...
Security update for postgresql14
This update for postgresql14 fixes the following issues: CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference bsc1233323. CVE-2024-10977: Make libpq discard error messages received during SSL or GSS protocol negotiatio...
Security update for postgresql15
This update for postgresql15 fixes the following issues: CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference bsc1233323. CVE-2024-10977: Make libpq discard error messages received during SSL or GSS protocol negotiatio...
Mageia: Security Advisory (MGASA-2024-0375)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0375 Updated php packages fix security vulnerabilities
Some heap errors, segmentation faults and security vulnerabilities have been found and corrected. It is advised to install this update...
Updated php packages fix security vulnerabilities
Some heap errors, segmentation faults and security vulnerabilities have been found and corrected. It is advised to install this update...
USN-7126-1 libsoup2.4 vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. CVE-2024-52530 It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An...