18515 matches found
CVE-2024-26250: Protection Mechanism Failure
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-20689: Stack-based Buffer Overflow
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-20669: Protection Mechanism Failure
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28919: Protection Mechanism Failure
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28920: Protection Mechanism Failure
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-29061: Stack-based Buffer Overflow
Secure Boot Security Feature Bypass Vulnerability...
KB5036969: Windows Server 2012 Security Update (April 2024)
The remote Windows host is missing security update 5036969. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...
CVE-2024-28925: Stack-based Buffer Overflow
Secure Boot Security Feature Bypass Vulnerability...
Adobe Experience Manager 6.5.0 < 6.5.20 Multiple Vulnerabilities (APSB24-21)
The version of Adobe Experience Manager installed on the remote host is prior to 6.5.20. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-21 advisory. - Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS...
KB5036960: Windows Server 2012 R2 Security Update (April 2024)
The remote Windows host is missing security update 5036960. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...
CVE-2024-28897: Improper Input Validation
Secure Boot Security Feature Bypass Vulnerability...
PT-2024-2865 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: The issue is related to the getWiFiExtenderConfig function, which can allow an attacker to obtain sensitive information without authorization. This can be exploited by a remote attacke...
DEBIAN-CVE-2024-26803
In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...
CVE-2024-26803 net: veth: clear GRO when clearing XDP even when down
In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...
CVE-2024-26803 net: veth: clear GRO when clearing XDP even when down
In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...
CVE-2024-29008 Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance
A problem has been identified in the CloudStack additional VM configuration extraconfig feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not...
PT-2024-20967 · Unknown · Advanced Rest Client
Name of the Vulnerable Software and Affected Versions: Advanced REST Client version 17.0.9 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function. This is a Cross Sit...
PT-2024-21613 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the userfaultfd feature in the Linux kernel, where the src folio is changed after ensuring it's unpinned in UFFDIO MOVE. A commit was made to fix an unexpected chang...
CVE-2024-26726
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extentmap for free space inode on write error While running the CI for an unrelated change I hit the following panic with generic/648 on btrfsholesspacecache. assertion failed: blockstart != EXTENTMAPHOLE, in...
