5207 matches found
[SECURITY] Fedora 37 Update: libkrun-1.5.0-2.fc37
Dynamic library providing Virtualization-based process isolation capabilities...
CVE-2023-30438
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...
CVE-2023-30438
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...
CVE-2023-30438 IBM PowerVM gain access
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...
IBM PowerVM Hypervisor 安全漏洞
IBM PowerVM Hypervisor is an application from International Business Machines IBM, Inc. Providing a secure and scalable virtualized environment, these applications are built on the advanced RAS features and leading performance of the Power Systems platform. A security vulnerability exists in IBM...
Linux Kernel ksmbd Multichannel Improper Authentication Session Hijack Vulnerability
This vulnerability allows remote attackers to hijack a session on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the handling of Session ID within Multichanne...
PT-2023-22692 · Ibm · Powervm
Name of the Vulnerable Software and Affected Versions: PowerVM on IBM Power9 and Power10 systems affected versions not specified Description: An internally discovered issue in PowerVM could allow an attacker with privileged user access to a logical partition to perform an undetected violation of...
CVE-2023-31134
Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...
CVE-2023-31134 Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...
CVE-2023-31134
The CVE-2023-31134 issue affects Tauri builds where IPC isolation can be bypassed by redirecting an existing window to an external website. This vulnerability exists in specific pre-patch versions: 1.0.0–1.0.9, 1.1.0–1.1.4, and 1.2.0–1.2.5. The attack surface is the IPC layer, granting external s...
Tauri 输入验证错误漏洞
Tauri is a Tauri open source for building smaller, faster, and more secure desktop applications using a web front end. An input validation error vulnerability exists in Tauri versions 1.0.0 through 1.0.9, 1.1.0 through 1.1.4, and 1.2.0 through 1.2, which stems from the fact that isolation can be...
Fedora: Security Advisory for libkrun (FEDORA-2023-cc21019773)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: libkrun-1.5.0-2.fc38
Dynamic library providing Virtualization-based process isolation capabilities...
Exploit for Improper Ownership Management in Debian Debian_Linux
README gcc -Wall exp.c pkg-config fuse --cflags --libs...
The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Exper, allows a intruder to execute arbitrary code.
The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Databricks Platform Cluster Isolation Bypass
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Bypassing cluster isolation through insecure defaults and shared storage product: Databricks Platform vulnerable version: PaaS version as of 2023-01-26 fixed version:...
PT-2023-9399 · Yealink · Yealink Meeting Server
Name of the Vulnerable Software and Affected Versions: Yealink Meeting Server versions prior to V26.0.0.67 Description: The issue is related to insufficient protection of service data, allowing a remote attacker to gain access to user credentials. This can be achieved by sending an HTTP request...
The vulnerability of the CNG Key Isolation service in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the CNG Key Isolation service in Windows operating systems is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
PT-2023-22234 · Unknown · Warpinator
Name of the Vulnerable Software and Affected Versions: Warpinator versions prior to 1.6.0 Description: The issue allows remote file deletion via directory traversal in top dir basenames. This could enable an attacker to delete arbitrary files on the recipient's computer. The vulnerability has bee...
CVE-2022-41739
IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...