EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2023-1262)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to loc...

CVE-2023-6505

The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files...

WordPress Plugin Migrate WordPress Website & Backups Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

PT-2024-14982 · WordPress · Migrate Wordpress Website & Backups

Name of the Vulnerable Software and Affected Versions: Migrate WordPress Website & Backups WordPress plugin versions prior to 1.9.3 Description: The issue concerns the Migrate WordPress Website & Backups WordPress plugin, which does not prevent directory listing in sensitive directories containin...

GO-2023-2385 Insufficient entropy in AES-256-CBC in github.com/pubnub/go

There is insufficient entropy in the implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt functions are less secure when hex encoding and trimming are applied, leaving half of the bits in the key always the same for every encoded message or file. Users are encouraged to...

PT-2023-36301 · Unknown · Distribution

Name of the Vulnerable Software and Affected Versions: distribution versions prior to 2.8.3 Description: The issue is related to several problems in the distribution package, including the parsing of errors as JSON, the handling of HTTP request bodies, and the deprecation of certain functions and...

How to migrate to new vcenter host connection

Change Citrix to the new vCenter server...

kernel: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()

A flaw was found in the Linux kernel's AMD Kernel Fusion Driver AMDKFD. In specific error conditions, an object holding a NULL value is used, causing a NULL pointer dereference and resulting in a denial of service...

kernel: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()

A flaw was found in the Linux kernel's AMD Kernel Fusion Driver AMDKFD. In specific error conditions, an object holding a NULL value is used, causing a NULL pointer dereference and resulting in a denial of service...

PT-2025-18581 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been resolved in the Linux kernel. The issue is located in the svm migrate to ram function. Specifically, the error occurs at line 985 in the kfd...

GHSA-RMQP-9W4C-GC7W Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SS...

Design/Logic Flaw

Metabase is an open-source business intelligence and analytics platform. Prior to versions 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, 1.43.7.3, 1.44.7.3, 1.45.4.3, and 1.46.6.4, a vulnerability could potentially allow remote code execution on one's Metabase server. The core issue is that one of the...

Not all profiles can be migrated to V2 profile

Lines of code Vulnerability details Impact There seem to be some differences in the validation logic that makes the V1 to V2 conversion for some profiles impossible. Proof of Concept // SPDX-License-Identifier: UNLICENCED pragma solidity =0.8.4; contract HandleMigration uint256 internal constant...

Malicious code in migrate-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f00afb76676c4aac170617bf2d9fe76bba3c4ea0c71610c6f3a5048b5c2ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-594 Malicious code in migrate-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f00afb76676c4aac170617bf2d9fe76bba3c4ea0c71610c6f3a5048b5c2ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: tcp: Fix data-races around sysctl_tcp_migrate_req.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmigratereq. While reading sysctltcpmigratereq, it can be changed concurrently. Thus, we need to add READONCE to its readers...

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

CVE-2023-28091

CVE-2023-28091 concerns HPE OneView, specifically the virtual appliance. The vulnerability is tied to the option “Migrate server hardware,” which may cause exposure of sensitive information in an HPE OneView support dump. Publicly documented details indicate a likely impact to confidentiality wit...

PT-2023-21551 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the exposure of sensitive information in an HPE OneView support dump when using the "Migrate server hardware" option in the HPE OneView virtual appliance...

Hewlett Packard Enterprise OneView 安全漏洞

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView, which stems from a Migrate server hardware option that exposes sensitive...