PT-2021-2590

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient protection of service data in the port mapping configuration of Microsoft Windows, allowing an attacker to gain unauthorized access to protected...

Microsoft Windows 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of the U.S. Microsoft Windows is a set of operating systems for personal devices, and Microsoft Windows Server is a set of server operating systems. An information disclosure vulnerability exists in the port mapping in Microsoft...

多款Siemens产品 安全特征问题漏洞

SIMOTICS CONNECT 400 is a connector and sensor box mounted on a low-voltage motor that provides analysis data for the MindSphere application SIDRIVE IQ Fleet. A security vulnerability exists in the Siemens SIMOTICS CONNECT 400. An attacker could exploit the vulnerability to topologize the DNS cac...

PT-2021-8005 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 dma tx queue skb raw function in the Linux kernel's mt76 component. It involves a potential DMA mapping leak due to the buf being uninitialized, which...

PT-2024-11132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 driver, specifically the mt7615 component, where the first pointer in the txp needs to be unmapped to prevent DMA mapping entries from leaking...

PT-2024-11131 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the mt76 module for the mt7915 device. The issue was related to the tx skb dma unmap, where the first pointer in...

CVE-2021-28685

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process and to interact with MSR registers. This cou...

CVE-2021-28685

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process and to interact with MSR registers. This cou...

OESA-2021-1111 kernel security update

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. Security Fixes: An issue was discovered in the Linux kernel 2.6.39...

FreeBSD-SA-21:08.vm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:08.vm Security Advisory The FreeBSD Project Topic: Memory disclosure by stale virtual memory mapping Category: core Module: vm Announced: 2021-04-06 Credits:...

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

Debian DLA-2610-1 : linux-4.19 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-27170, CVE-2020-27171 Piotr Krysiuk discovered flaws in the BPF subsystem's checks for information leaks throu...

Guangzhou Jiuan Intelligent Technology Co., Ltd JA7208 Has Logic Flaw Vulnerability

Guangzhou Jiuan Intelligent Technology Co., Ltd. is a leading global provider of mobile mapping infrastructure and IoT platform. A logic flaw vulnerability exists in JA7208 of Guangzhou Jiuan Intelligent Technology Company Limited, which can be exploited by an attacker to bypass login...

PT-2021-8279 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically with the PCI interrupt mapping in the ARM footbridge. Since a particular commit, the PCI code calls the IRQ mapping function...

DNS over TLS Server Detection

The remote service is a Domain Name System DNS server, running over TLS, which provides a mapping between hostnames and IP addresses. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid147947; scriptversion"1.1"; scriptnameenglish:"DNS over TLS Server Detection";...

Important: kernel

Issue Overview: An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be...

Input validation

Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearable...

PT-2024-11147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been resolved in the Linux kernel, specifically in the crypto: sun8i-ss module. The issue occurs when the dma iv mapping fails, causing the return error path to...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0737-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0736-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...