Design/Logic Flaw

An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML...

CVE-2022-38744

CVE-2022-38744 affects Rockwell Automation FactoryTalk Alarm and Events Server. It exploits improper access control to allow an unauthenticated remote attacker with network access to open a connection, fault the service, and render the server unavailable. Affected component is the FactoryTalk Ala...

PT-2022-6956 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to the Connectivity Fault Management CFM feature of Cisco IOS XR Software. It is caused by incorrect processing of invalid continuity check messages CCMs,...

PT-2022-24549 · Rockwell Automation · Rockwell Automation Factorytalk Alarm/Events Service

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk Alarm and Events service affected versions not specified Description: The issue allows an unauthenticated attacker with network access to cause the Rockwell Automation FactoryTalk Alarm and Events service to...

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

DEBIAN-CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

Design/Logic Flaw

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

UBUNTU-CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

PT-2023-2581 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.19-rc4 Description: A flaw was found in the Linux kernel's udmabuf device driver, specifically within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can resu...

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

CVE-2022-3344

CVE-2022-3344 is a vulnerability in the Linux kernel related to KVM AMD nested virtualization (SVM). The issue allows a malicious L1 guest to fail to intercept the shutdown of a cooperative nested L2 guest, which can cause a page fault and kernel panic on the host. Public sources in Connected doc...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Mageia: Security Advisory (MGASA-2022-0384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3152 : glibc-doc - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3152 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3152-1 [email protected]...

SUSE SLES12 Security Update : jasper (SUSE-SU-2022:3672-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3672-1 advisory. - CVE-2022-2963: Fixed memory leaks in function cmdoptsparse bsc1202642. Tenable has extracted the preceding description block directly from...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to memory corruption in scenedump.c which causes a segmentation fault, allowing an attacker to crash the application...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to buffer overflow in the BDCheckSFTimeOffset function in fielddecode.c which causes a segmentation fault, allowing an attacker to crash the application...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to a excessive memory consumption in the gfisommetarestoreitemsref function of meta.c which causes a segmentation fault, allowing an attacker to crash the application...

The vulnerability in the implementation of the Assimp::XFileImporter::CreateMeshes() function of the Open Asset Import Library (Assimp) allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Assimp::XFileImporter::CreateMeshes implementation in the Open Asset Import Library Assimp is related to segmentation fault issues. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...