Lucene search
+L

343 matches found

RedhatCVE
RedhatCVE
added 2024/10/22 11:8 a.m.26 views

CVE-2024-50031

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

5.5CVSS7.1AI score0.00235EPSS
Exploits0References4
NVD
NVD
added 2024/10/21 8:15 p.m.19 views

CVE-2024-50031

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

5.5CVSS0.00235EPSS
Exploits0References6
CVE
CVE
added 2024/10/21 7:39 p.m.128 views

CVE-2024-50031

CVE-2024-50031 affects the Linux kernel DRM V3D component (Raspberry Pi) where closing the kmscube fd does not stop the active perfmon, leaving v3d->active_perfmon as a stale pointer. This can lead to a kernel panic (Oops) when a new kmscube runs and attempts to stop the perfmon. The root caus...

5.5CVSS5.1AI score0.00235EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/10/21 7:39 p.m.23 views

CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

5.5CVSS6AI score0.00235EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drm/v3d module not stopping active monitors before destroying the performance monitor...

5.5CVSS6.6AI score0.00235EPSS
Exploits0References7
Cvelist
Cvelist
added 2024/10/16 2:12 p.m.68 views

CVE-2024-45844 BIG-IP monitors vulnerability

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.6CVSS0.10582EPSS
Exploits1References1
CVE
CVE
added 2024/10/16 2:12 p.m.98 views

CVE-2024-45844

CVE-2024-45844 affects F5 BIG-IP monitors vulnerability. The issue allows an authenticated attacker with Manager-level privileges (via Configuration utility or tmsh) to elevate privileges or modify configuration due to a monitor feature flaw. Affected BIG-IP versions and fixes: 15.1.x up to 15.1....

8.6CVSS7AI score0.10582EPSS
Exploits1References2Affected Software21
Citrix
Citrix
added 2024/09/17 12:0 a.m.7 views

Open Applications on Published Desktops are Moved to the Main Screen After Reconnecting.

Users connect to VDA from an endpoint with multiple monitors Applications are arranged by the end user so some apps are visible only on the secondary monitor The user disconnects from the session either manually or due to a disconnect on Lock policy The user reconnects to the session from the sam...

7.1AI score
Exploits0
Vulnrichment
Vulnrichment
added 2024/08/20 8:56 p.m.22 views

CVE-2024-42362 GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import

Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated user role RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0...

8.8CVSS6.7AI score0.0133EPSS
Exploits1References6
Cvelist
Cvelist
added 2024/08/20 8:56 p.m.33 views

CVE-2024-42362 GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import

Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated user role RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0...

8.8CVSS0.0133EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/08/20 12:0 a.m.7 views

Hertzbeat 安全漏洞

Hertzbeat is an open source real-time monitoring system from the dromara organization. A security vulnerability exists in Hertzbeat prior to version 1.6.0 that stems from an insecure deserialization issue in the /api/monitors/import location that could lead to remote code execution...

8.8CVSS7.9AI score0.0133EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2024/08/20 12:0 a.m.12 views

PT-2024-29897 · Hertzbeat · Hertzbeat

Name of the Vulnerable Software and Affected Versions: Hertzbeat versions prior to 1.6.0 Description: Hertzbeat is an open source, real-time monitoring system. It has an authenticated Remote Code Execution RCE vulnerability via unsafe deserialization in the "/api/monitors/import" API endpoint...

8.8CVSS7.5AI score0.0133EPSS
Exploits1References12
Citrix
Citrix
added 2024/06/11 12:0 a.m.12 views

CWA - Multimonitor -Session resolution on external displays is not in sync

Issue seen with multiple external monitors via docking stations. When session is spanned across all the screens, the resolutions on either side are not in sync and there is a disjointed black section in the middle. Also, the mouse control seems slightly off. As a workaround use the desktop is...

7.1AI score
Exploits0
UbuntuCve
UbuntuCve
added 2024/04/17 10:15 a.m.26 views

CVE-2024-26842

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix shift issue in ufshcdclearcmd When tasktag = 32 in MCQ mode and sizeofunsigned int == 4, 1U Workqueue: ufsehwq0 ufshcderrhandler Call trace: dumpbacktrace+0xf8/0x144 showstack+0x18/0x24 dumpstacklvl+0x78/0x9c...

7.8CVSS6.3AI score0.00236EPSS
Exploits0References5
Fedora
Fedora
added 2023/11/03 7:1 p.m.54 views

[SECURITY] Fedora 39 Update: watchman-2021.05.10.00-24.fc39

Watchman exists to watch files and record when they actually change. It can a lso trigger actions such as rebuilding assets when matching files change...

7.5CVSS8.7AI score0.99999EPSS
Exploits20
IBM Security Bulletins
IBM Security Bulletins
added 2023/10/23 1:16 p.m.43 views

Security Bulletin: Due to use of OpenSSL, IBM Tivoli Netcool System Service Monitors/Application Service Monitors is vulnerable to a denial of service.

Summary OpenSSL is used within IBM Tivoli Netcool System Service Monitors/Application Service Monitors. CVE-2023-0464 Vulnerability Details CVEID:CVE-2023-0464 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error related to the verification of X.509 certificate chains tha...

7.5CVSS7.5AI score0.03658EPSS
Exploits0Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2023/10/12 12:0 a.m.25 views

Certain HP Displays - Theft Deterrence

A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated. HP has identified affected monitors and corresponding SoftPaqs with minimum versions that mitigate the potential...

3.3CVSS7AI score0.00166EPSS
Exploits0Affected Software13
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.32 views

Microsoft Windows UMPDDrvBitBlt Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple...

7.8CVSS7.5AI score0.11648EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.39 views

Microsoft Windows UMPDDrvPlgBlt Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple...

7.8CVSS7.5AI score0.11648EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.35 views

Microsoft Windows UMPDDrvStretchBltROP Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple...

7.8CVSS7.5AI score0.11648EPSS
Exploits0References1
Rows per page
Query Builder