27626 matches found
GitLab 10.6 < 12.9.10 / 12.10 < 12.10.11 / 13.0 < 13.0.6 (CVE-2020-13277)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5 CVE-2020-13277 Note that Nessus has not tested for this issue bu...
Spreadsheet::ParseExcel RCE (CVE-2023-7101)
According to its self-reported version number, the Spreadsheet::ParseExcel perl module is vulnerable to a remote code execution vulnerability due to passing unvalidated input from a file into a string-type âevalâ. Specifically, the issue stems from the evaluation of Number format strings not ...
CVE-2024-21823
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
CVE-2023-45733
Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...
CVE-2023-45733
Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...
CVE-2023-45733
Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...
CVE-2023-45733
CVE-2023-45733 describes a hardware/microcode issue: race conditions in Intel processors’ microcode can allow a local, authenticated user to partially disclose information. Publicly documented effects come from Intel’s advisory and distribution notes (e.g., intel-microcode race conditions). Affec...
CVE-2023-45733
Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...
CVE-2023-45733
Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...
CVE-2023-45733
Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access...
CVE-2024-21823
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
CVE-2024-21823
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
CVE-2024-21823
CVE-2024-21823 affects Intel DSA/IAA on some 4th/5th generation Xeon processors. The issue is described as hardware logic with insecure de-synchronization, enabling a local, authenticated user to potentially escalate privileges. Connected documents corroborate a local-exploit scenario and mention...
CVE-2024-31142
Because of a logical error in XSA-407 Branch Type Confusion, the mitigation is not applied properly when it is intended to be used. XSA-434 Speculative Return Stack Overflow uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html...
CVE-2024-31142 x86: Incorrect logic for BTC/SRSO mitigations
Because of a logical error in XSA-407 Branch Type Confusion, the mitigation is not applied properly when it is intended to be used. XSA-434 Speculative Return Stack Overflow uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html...
CVE-2024-31142 x86: Incorrect logic for BTC/SRSO mitigations
Because of a logical error in XSA-407 Branch Type Confusion, the mitigation is not applied properly when it is intended to be used. XSA-434 Speculative Return Stack Overflow uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html...
Intel Processors 安全漏洞
Intel Processors is an American Intel company that provides the ability to interpret computer instructions and process data in computer software. A security vulnerability exists in Intel Processors that stems from a hardware logic containing a race condition. The vulnerability could allow an...
CVE-2024-34353
The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...
