7163 matches found
SUSE CVE-2024-36016
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix possible out-of-bounds in gsm0receive Assuming the following: - side A configures the ngsm in basic option mode - side B sends the header of a basic option mode frame with data length 1 - side A switches to advance...
DEBIAN-CVE-2024-36887
In the Linux kernel, the following vulnerability has been resolved: e1000e: change usleeprange to udelay in PHY mdic access This is a partial revert of commit 6dbdd4de0362 "e1000e: Workaround for sporadic MDI error on Meteor Lake systems". The referenced commit used usleeprange inside the PHY...
UBUNTU-CVE-2024-36887
In the Linux kernel, the following vulnerability has been resolved: e1000e: change usleeprange to udelay in PHY mdic access This is a partial revert of commit 6dbdd4de0362 "e1000e: Workaround for sporadic MDI error on Meteor Lake systems". The referenced commit used usleeprange inside the PHY...
CVE-2024-36883 net: fix out-of-bounds access in ops_init
In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in opsinit netallocgeneric is called by netalloc, which is called without any locking. It reads maxgenptrs, which is changed under pernetopsrwsem. It is read twice, first to allocate an array, then t...
Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha
Brazilian banking institutions are the target of a new campaign that distributes a custom variant of the Windows-based AllaKore remote access trojan RAT called AllaSenha. The malware is "specifically aimed at stealing credentials that are required to access Brazilian bank accounts, and leverages...
CVE-2022-48681
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...
CVE-2022-48681
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...
CVE-2022-48681
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...
CVE-2022-48681
The CVE CVE-2022-48681 affects some Huawei smart speakers and is described as a memory overflow vulnerability. Huawei PSIRT advisory HWPSIRT-2022-52860 confirms this CVE ID and notes that exploitation may cause certain functions to fail. The connected documents do not provide specific affected mo...
SUSE CVE-2021-47501
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40edbgdumpdesc When trying to dump VFs VSI RX/TX descriptors using debugfs there was a crash due to NULL pointer dereference in i40edbgdumpdesc. Added a check to i40edbgdumpdesc that checks ...
PT-2024-11773 · Huawei · Huawei Smart Speakers
Name of the Vulnerable Software and Affected Versions: Huawei smart speakers affected versions not specified Description: The issue is related to a memory overflow, which may cause certain functions to fail upon successful exploitation. Recommendations: At the moment, there is no information abou...
Huawei smart speakers 安全漏洞
Huawei smart speakers are a series of smart speakers from Chinese company Huawei Huawei. A security vulnerability exists in Huawei smart speakers, which stems from the presence of a memory overflow that may cause some functions to fail...
PT-2024-40477 · Silverstripe · Silverstripe/Framework
Name of the Vulnerable Software and Affected Versions: Silverstripe Framework affected versions not specified Description: The issue allows arbitrary global functions to be executed if malicious user input is passed through as the second argument of ViewableData::renderWith. This occurs when the...
GHSA-3965-HPX2-Q597 Pug allows JavaScript code execution if an application accepts untrusted input
Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would...
CVE-2024-36361
Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would...
kernel: i40e: Do not allow untrusted VF to remove administratively set MAC
A flaw was found in Intel network adapters in the Linux kernel, where untrusted virtualized network interfaces can remove MAC addresses set by the system. This flaw allows an attacker with sufficient privileges to cause a denial of service...
PT-2024-40783 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object, gs memory chunk unwrap, and gs j...
The vulnerability of the Polarion ALM application lifecycle management software, related to access control deficiencies, allows a malicious individual to gain unauthorized access to functions that are otherwise restricted.
The vulnerability of the Polarion ALM application lifecycle management software is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to functions that are otherwise restricted...