Important: tomcat

Issue Overview: A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could...

The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.

The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...

Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL

Overview Some of the Windows kernel drivers provided by Phoenix Technologies Inc. is vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-35841. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...

kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds

An out-of-bounds write flaw was found in the Linux kernel’s console driver functionality in the way a user triggers the ioctl PIOFONT with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2023-20564

Insufficient validation in the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution...

CVE-2023-20560

Insufficient validation of the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20560

Insufficient validation of the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20560

The CVE-2023-20560 issue is an Intel IOCTL input buffer validation vulnerability in AMD Ryzen™ Master. The root cause is insufficient validation of the IOCTL input buffer in Ryzen Master, which could allow a privileged attacker to supply a null value, potentially causing a Windows crash and resul...

CVE-2023-20560

Insufficient validation of the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20564

The CVE-2023-20564 entry concerns AMD Ryzen Master Driver IOCTL input validation. Connected sources detail vulnerable component AMDRyzenMasterDriverV17.sys and two IOCTLs: 0x81112F08 (physical memory read) and 0x81112F0C (physical memory write), with insufficient validation of addresses, sizes, a...

CVE-2023-20564

Insufficient validation in the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution...

CVE-2023-20564

Insufficient validation in the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution...

The vulnerability of the Foxboro.sys driver of the distributed system management software EcoStruxureTM Foxboro DCS Control Core Services allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Foxboro.sys driver, a microprogramming software component of the distributed control system EcoStruxureTM Foxboro DCS Control Core Services, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

The vulnerability of the Model I/O framework in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Model I/O framework in macOS operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-20561

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20562

Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...

CVE-2023-20562

Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...

CVE-2023-20556

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20560

Insufficient validation of the IOCTL Input Output Control input buffer in AMD RyzenTM Master may allow a privileged attacker to provide a null value, potentially resulting in a Windows crash, leading to denial of service. Mitigation Please contact AMD support for updates...

CVE-2023-20562

Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver, potentially leading to arbitrary kernel execution. Mitigation Please contact AMD support for updates...