Hypervisor-protected Code Data Compromise Windows Bypass

The vulnerability of the Code Integrity protection function of the Hypervisor-protected Code Integrity mechanism in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

CVE-2021-47124

In the Linux kernel, the following vulnerability has been resolved: iouring: fix link timeout refs WARNING: CPU: 0 PID: 10242 at lib/refcount.c:28 refcountwarnsaturate+0x15b/0x1a0 lib/refcount.c:28 RIP: 0010:refcountwarnsaturate+0x15b/0x1a0 lib/refcount.c:28 Call Trace: refcountsubandtest...

MELSEC-Q Series Processor Code Execution

The vulnerability of the modules of the central processor in microprogrammed logic controllers of the MELSEC-Q Series and MELSEC-L Series is related to errors during the scaling of indicators. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

Windows Hyper-V DoS

The vulnerability of the Windows Hyper-V hardware virtualization system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to increase their privileges...

Linux rk817 Component Heap Buffer Overflow DoS

The vulnerability of the ofnodeput function in the rk817 component of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

MongoDB TLS Certificate Validation Unauthorized Connection

The vulnerability of the MongoDB database management system is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows an attacker to establish unauthorized connections to the MongoDB server remotely...

Linux gsm_cleanup_mux Code Execution

The vulnerability of the gsmcleanupmux function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Meson kernel Heap Buffer Overflow DoS

The vulnerability of the drmbridgegetedid function in the Meson component of the Linux operating system is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux 8250_port DoS

The vulnerability of the 8250port component in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-2-1702

2.1702 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-1374

2.1374 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-995

2.995 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

ROS-2-1675

2.1675 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

ROS-2-1598

2.1598 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

IBM Watson CP4D Data Stores HTTP Request Processing

The vulnerability of cloud-based data storage software from IBM Watson CP4D Data Stores relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...

Veritas NetBackup Snapshot Manager Certificate Validation

The vulnerability of the data image management software in the context of Veritas NetBackup Snapshot Manager lies in errors related to the authentication process. Exploiting this vulnerability allows an attacker to interact with the RabbitMQ service remotely...

PT-2024-2284 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows Telephony Server, which can be exploited to elevate privileges. An...

PT-2024-2080 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to synchronization errors in the Windows Print Spooler, specifically a "race condition" that can be exploited to elevate privileges. This could allow an...

CVE-2024-26616

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned BUG There is a bug report that, on a ext4-converted btrfs, scrub leads to various problems, including: - "unable to find chunk map" errors BTRFS info device...