14019 matches found
Update Rollup 2 for System Center 2016 Virtual Machine Manager
Update Rollup 2 for System Center 2016 Virtual Machine Manager Applies To System Center 2016 Virtual Machine Manager Notice This update rollup has been updated to include additional fixes. For more information, see Update Rollup 2.1 for System Center 2016 Virtual Machine Manager. We recommend tha...
CVE-2024-56628
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...
CVE-2024-56559
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...
CVE-2024-53188
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix crash when unbinding If there is an error during some initialization related to firmware, the function ath12kdpcccleanup is called to release resources. However this is released again when the device is unbinded...
CVE-2024-56559 mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...
DEBIAN-CVE-2024-53188
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix crash when unbinding If there is an error during some initialization related to firmware, the function ath12kdpcccleanup is called to release resources. However this is released again when the device is unbinded...
UBUNTU-CVE-2024-53228
In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: Fix out-of-bounds array access In kvmriscvvcpusbiinit the entry-extidx can contain an out-of-bound index. This is used as a special marker for the base extensions, that cannot be disabled. However, when traversing the...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper use of userspaceirqchipinuse in the KVM subsystem...
DIAScreen Code Execution
The vulnerability of the DIAScreen component in the integrated engineering software package DIAStudio Smart Machine Suite of Delta Electronics is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DIAScreen Code Execution
The vulnerability of the DIAScreen component in the integrated engineering software package DIAStudio Smart Machine Suite of Delta Electronics is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DIAScreen Code Execution
The vulnerability of the DIAScreen component in the integrated engineering software package DIAStudio Smart Machine Suite of Delta Electronics is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-12902
ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default...
CVE-2024-12902
The CVE covers Global Wisdom Software ANCHOR running on a Windows VM, where default passwords on high-privilege Windows service accounts could let an attacker remotely log in to the VM. Public documents confirm the vulnerability vector as remote access via default credentials, driven by OS-level ...
CVE-2024-12902 Global Wisdom Software ANCHOR - Undocumented Privileged Account
ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default...
CVE-2024-12902: Use of Default Credentials
ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default...
SUSE CVE-2024-11614
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using...
Malicious code in private-bug-bounty (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00733ed27d2b66f512559495dc079196948c176ea93c337042bed009427afc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dhp-http-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3bd8d790ed5b426b7b312480732dc8343670572c60141f63f9a0d7df7b8efe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in woodpecker-ci (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff5749234f2b25995b0c9e8c5b6baa0434340fe0646aa21e19eef1e6612812a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in slack-sns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dde2984debaba750af691ea1ba70116984fba098ecf0fe26a0fdf576d386f53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...