Lucene search
+L

8380 matches found

UbuntuCve
UbuntuCve
•added 2024/03/20 11:15 a.m.•40 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS6.1AI score0.00805EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2024/03/20 11:15 a.m.•20 views

UBUNTU-CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS5.8AI score0.00805EPSS
SaveExploits0References3
Mend
Mend
•added 2024/03/20 10:35 a.m.•6 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

6.9CVSS0.00805EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/03/20 10:35 a.m.•97 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS4.2AI score0.00805EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/03/20 10:35 a.m.•68 views

CVE-2023-46839 pci: phantom functions assigned to incorrect contexts

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

4.5AI score0.00805EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/20 10:35 a.m.•153 views

CVE-2023-46839

A vulnerability exists in the Xen hypervisor involving the phantom() function. When PCI devices use phantom functions to generate requests from unpopulated IDs, the system may fail to properly set up the required IOMMU context . Because this failure is not fatal, a primary device might be assigne...

5.3CVSS4.5AI score0.00805EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/20 10:35 a.m.•30 views

CVE-2023-46839 pci: phantom functions assigned to incorrect contexts

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

7.1AI score0.00805EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•5 views

CVE-2023-46839: Undefined Security Weakness

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS5.8AI score0.00805EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/03/19 12:15 p.m.•6 views

DEBIAN-CVE-2024-2608

AppendEncodedAttributeValue, ExtraSpaceNeededForAttrEncoding and AppendEncodedCharacters could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...

8.4CVSS7.9AI score0.00385EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2024/03/19 7:00 a.m.•21 views

net: netdevsim: don't try to destroy PHC on VFs

...

5.5CVSS7.3AI score0.00224EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/03/19 12:00 a.m.•21 views

RHEL 8 : postgresql (RHSA-2024:1428)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1428 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW...

8CVSS7.8AI score0.01808EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/03/19 12:00 a.m.•6 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in several Mozilla products, cause...

8.4CVSS8.1AI score0.00385EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2024/03/19 12:00 a.m.•29 views

RHEL 8 : postgresql (RHSA-2024:1429)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1429 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW...

8CVSS7.8AI score0.01808EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/03/18 11:51 p.m.•5 views

Malware in functions-workshop

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/03/18 11:51 p.m.•7 views

Malicious code in functions-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a06f38f710e6db446e87fdd3bf34a273d5dbcb0a8cfc5a9f0440ec7a498845b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•30 views

RHEL 8 : postgresql:10 (RHSA-2024:1348)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1348 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW...

8CVSS7.8AI score0.01808EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2024/03/17 11:30 a.m.•50 views

mapXplore - Allow Exporting The Information Downloaded With Sqlmap To A Relational Database Like Postgres And Sqlite

mapXplore is a modular application that imports data extracted of the sqlmap to PostgreSQL or SQLite database. Its main features are: Import of information extracted from sqlmap to PostgreSQL or SQLite for subsequent querying. Sanitized information, which means that at the time of import, it...

6.9AI score
SaveExploits0References4
Veracode
Veracode
•added 2024/03/15 7:18 p.m.•37 views

Unauthorized File Access

org.apache.pulsar: pulsar-functions-worker is vulnerable to Unauthorized File Access. The vulnerability is due to a feature that allows authenticated users to create functions with implementations referenced by URLs, including file, http, and https schemes. This vulnerability can potentially lead...

8.8CVSS6.7AI score0.01895EPSS
SaveExploits0References4Affected Software2
CNVD
CNVD
•added 2024/03/14 12:00 a.m.•18 views

Unspecified Vulnerability in Apache Pulsar (CNVD-2024-26183)

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

8.8CVSS6.9AI score0.01895EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/13 9:16 p.m.•28 views

Cross site scripting

A Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of missing sanitization in createtag in admin/include/functions.php...

6.8AI score0.00434EPSS
SaveExploits0References3
Rows per page
Query Builder