Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Insecure Direct Object Reference Vulnerability

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it...

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Authentication Bypass

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Authentication Bypass Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 0.01 Revision 0 Summary: The REBLE610 features an accurate hardware design, absence of internal cabling and full modularity. The unit is composed...

How to track and stop CVE-2024-3400: Palo Alto Networks API Exploit Causing Critical Infrastructure and Enterprise Epidemics

On Friday April 12, Palo Alto disclosed that some versions of PAN-OS are not only vulnerable to remote code execution, but that the vulnerability has been actively exploited to install backdoors on Palo Alto firewalls. A patch is expected to be available on April 14th. The advisory from Palo Alto...

PT-2024-22983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a missing bounds check in the apply minlock constraint function of dvfs.c, which could lead to a possible out of bounds read. This might result in local...

PT-2024-22987 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read in the dvfs get lv function of dvfs.c due to a missing null check. This could lead to local...

kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier

A flaw was found in sysmembarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine...

Rockwell Automation PowerFlex 527 Denial of Service Vulnerability

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation PowerFlex 527, which stems from improper restriction of device traffic and can be exploited by an attacker to cause the devic...

Rockwell Automation PowerFlex 527 Input Validation Error Vulnerability

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. The Rockwell Automation PowerFlex 527 has an input validation error vulnerability that can be exploited by an attacker to cause CIP communication to be interrupted, requiring a manual restart...

Azure Bill Forecast High After Subscribing to Veeam Data Cloud

Challenge After subscribing to Veeam Data Cloud for Microsoft 365 via Microsoft Marketplace, the Cost Analysis chart within the Microsoft Azure portal displays a forecasted future cost much higher than expected. Cause The forecast chart in the Cost Analysis tile uses a simplified algorithm for...

CVE-2024-27218

In updatefreqdata of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27218

In updatefreqdata of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the updatefreqdata method of the TBD module, which may result in out-of-bounds reads...

The vulnerability of the DVFS (Dynamic Voltage and Frequency Scaling) function in the Tegra 30 embedded system operating system drivers allows a hacker to cause a service failure.

The vulnerability of the DVFS Dynamic Voltage and Frequency Scaling function in the Tegra 30 embedded system’s Linux kernel drivers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2024-7870 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's qcom component, where frequency table arrays are not properly terminated, leading to potential out-of-bound access when traversed by function...

PT-2024-7869 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's qcom component, specifically with the termination of frequency table arrays. The arrays are supposed to be terminated with an empty element t...

SUSE CVE-2020-36776

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreqcooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpupowertofreq. If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index...

PT-2024-21599 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, where the frequency table arrays are not properly terminated with an empty element. This can lead to possible out-of-bound access when the tab...

CVE-2020-36776

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreqcooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpupowertofreq. If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index...

CVE-2020-36776

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreqcooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpupowertofreq. If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index...

UBUNTU-CVE-2020-36776

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreqcooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpupowertofreq. If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index...