MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which originates from mishandling of errors in the Modem, resulting in a system crash...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which originates from mishandling of errors in the Modem, resulting in a system crash...

pgAdmin 4 Permission Error Code Execution

The vulnerability of the pgAdmin 4 database management tool is related to permission handling errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1 3.11.7 3.10.13 3.9.18 and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

...

CVE-2024-35156

IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292766...

CVE-2024-35155

IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765...

Google Updater Privilege Escalation

The vulnerability of the application for updating Google Updater is related to data processing errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

NVIDIA GPU Display Driver Code Execution

The vulnerability of the NVIDIA GPU Display Driver software driver is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code, enhance their privileges, or disclose sensitive information...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

python: Path traversal on tempfile.TemporaryDirectory

A flaw was found in the tempfile.TemporaryDirectory class in python3/cpython3. The class may dereference symbolic links during permission-related errors, resulting in users that run privileged programs being able to modify permissions of files referenced by the symbolic link...

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

ThinServer Code Execution

The vulnerability of the ThinServer component of Rockwell Automation’s centralized application management platform, ThinManager, relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL query...

ROS-20240625-04

A vulnerability in the e1000e component of the QEMU server is related to DMA re-entry. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the registervfs function hw/pci/pciesriov.c of the QEMU hardware emulator is related to a buffer overflo...

Azure Identity Libraries Privilege Escalation

The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components in the Azure Identity Libraries and Microsoft Authentication Library authentication libraries is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow attacke...

IBM DB2 Resource Management DoS

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service interruptions by executing specially crafted SQL queries remotely...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

IBM DB2 Resource Management DoS

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted queries...

Windows Perception Service Privilege Escalation

The vulnerability of the Windows Perception Service’s security monitoring function is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

NVIDIA Triton Inference Server Information Disclosure

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2024-39469

CVE-2024-39469 affects the Linux kernel nilfs2: the bug was in nilfs_empty_dir()’s error handling. If a directory folio/page read fails or nilfs_check_folio() fails, the old code could misjudge the directory as empty and even loop after a failed read, causing filesystem corruption or a long I/O l...