12516 matches found
The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to deficiencies in access control. This vulnerability allows attackers to escalate their privileges.
The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service vulnerability in the virtual machine hypervisor...
vmm-sys-util security vulnerability
vmm-sys-util is a collection of modules providing helpers and utilities used by several rust-vmm components. A security vulnerability exists in vmm-sys-util versions prior to 0.5.0 through 0.12.0 that stems from an out-of-bounds memory access vulnerability in the FamStructWrapper component...
PT-2024-12969 · Zte · Zxcloud Irai
Name of the Vulnerable Software and Affected Versions: ZXCLOUD iRAI affected versions not specified Description: There is an illegal memory access issue in ZTE's ZXCLOUD iRAI product. When exploited by an attacker with common user permission, the physical machine will crash. Recommendations: At t...
PT-2024-12379 · Unknown · Hypervisor
Name of the Vulnerable Software and Affected Versions: Hypervisor affected versions not specified Description: The issue involves a permanent denial of service DOS in the Hypervisor when an untrusted virtual machine VM without Power State Coordination Interface PSCI support makes a PSCI call. Thi...
The status of VDA machine was "Stopped" instead of "Stopped (Deallocated)" on Azure Portal
The following behavior was confirmed for dedicated machines created using Azure on-demand provisioning. - If shutdown the target VM within the OS, the status will be "Stopped" on Azure Portal. If it is "stopped", it will be subject to Azure pay-as-you-go billing. - If the target VM is from the...
CVE-2022-41761
An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files...
Denial Of Service (DOS)
QEMU virtual machine monitor is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a DMA reentrancy issue leading to a use-after-free error found in the e1000e NIC emulation code. This can lead to a privileged guest user crash the QEMU process on the host, resulting in a Deni...
PYSEC-2023-249
Gradio is an open-source Python package that allows you to quickly build a demo or web application for your machine learning model, API, or any arbitary Python function. Versions of gradio prior to 4.11.0 contained a vulnerability in the /file route which made them susceptible to file traversal...
"The given key was not present in the dictionary" error when adding machine to machine catalog
"The given key was not present in the dictionary" error occurs when adding a machine to the machine catalog using the same name with that of a deleted VM. ---------------------------------------------------------------------------------------------- StudioErrorId : ExceptionThrown Reason :...
GHSA-3PJV-R7W4-2CF5 Grails data binding causes JVM crash and/or other denial of service
Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. Patches Patches are available for Grails 3 and later. Workarounds No workaround is possible except to avoid data binding to request data...
GHSA-HH8P-P8MP-GQHM MLFlow Path Traversal Vulnerability
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2023-6975
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
Command injection
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2023-6975 Path Traversal: '\..\filename'
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2023-6975 Path Traversal: '\..\filename'
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
Mlflow Code Issue Vulnerability
Mlflow is an open source platform for machine learning lifecycle. Mlflow suffers from a code issue vulnerability. An attacker exploiting this vulnerability could remotely execute code on a victim computer...
Grails Resource Management Error Vulnerability
Grails is a suite of open source frameworks for rapid web application development based on the Groovy programming language from the Grails project. Grails suffers from a resource management error vulnerability that originates from allowing an attacker to cause a denial of service DOS to the JVM v...
CVE-2023-50466
An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or access sensitive information via injecting a crafted payload into the HMI Name parameter...
Malicious code in fgrav (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 260f4b9823b4fdb4f4a442ef4822b86e3300331240bcd5288afe034380699df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...