PT-2024-40550 · Mozilla · Seamonkey

Name of the Vulnerable Software and Affected Versions: SeaMonkey versions prior to 2.53.19 Description: The issue is related to a security vulnerability in SeaMonkey. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where thi...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

Astra Linux – Vulnerability in freeipa

A vulnerability was discovered in FreeIPA when a Kerberos TGS-REQ is encrypted using the client’s session key. This key varies for each new session, which helps protect it from brute-force attacks. However, the tickets contained within are encrypted using the target principal key directly. For us...

CVE-2024-34028

CVE-2024-34028 affects Intel Graphics Offline Compiler for OpenCL Code software on Windows prior to 2024.1.0.142 and graphics driver 31.0.101.5445, with an underlying issue described as an uncontrolled search path. The Red Hat and Intel advisories confirm this can potentially enable privilege esc...

CVE-2024-34028

Uncontrolled search path in some IntelR Graphics Offline Compiler for OpenCLTM Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Graphics Offline Compiler 代码问题漏洞

Intel Graphics Offline Compiler is an application from Intel Corporation USA. A security vulnerability exists in Intel Graphics Offline Compiler that stems from an uncontrolled search path. An attacker can exploit the vulnerability to elevate privileges...

CVE-2024-34028: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR Graphics Offline Compiler for OpenCLTM Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-25653

Name of the Vulnerable Software and Affected Versions IntelR Graphics Offline Compiler for OpenCLTM Code software for Windows versions prior to 2024.1.0.142 IntelR Graphics Driver versions prior to 31.0.101.5445 Description The issue is related to an uncontrolled search path in the IntelR Graphic...

kernel: powerpc/smp: do not decrement idle task preempt count in CPU offline

A vulnerability was found in the Linux kernel's powerpc/smp architecture, where the idle task's preemption count was incorrectly decremented during the CPU offline process. This issue caused a "scheduling while atomic" error when a CPU was offlined and then onlined again, leading to potential...

PT-2024-36851

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a missed RCU barrier on deoffloading in the Linux kernel. Running the rcutorture test with specific parameters can trigger a warning and a deadlock. The problem...

rcu/nocb: Fix rcuog wake-up from offline softirq

...

CVE-2020-11916

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased...

CVE-2019-20457

An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD...

CVE-2019-20457

An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD...

CVE-2019-20457

A security vulnerability exists in Brother MFC-J491DW (version C1806180757 ) devices, allowing for an unauthenticated password hash disclosure . The flaw occurs because the response header of any failed login attempt returns an incomplete authorization cookie containing the MD5 hash of the passwo...

CVE-2020-11916: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased...

PT-2024-10770 · Siime Eye · Siime Eye

Name of the Vulnerable Software and Affected Versions: Siime Eye version 14.1.00000001.3.330.0.0.3.14 Description: An issue was discovered in Siime Eye where the password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success...

Malicious code in offline-rl-congestion-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c144e79980c0e56341b733c970e59592e1f56df443f7d1b41668ca35ec4cc11 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10836 Malicious code in offline-rl-congestion-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c144e79980c0e56341b733c970e59592e1f56df443f7d1b41668ca35ec4cc11 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

SUSE CVE-2024-50098

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEVQUIESCE was set for all LU's scsidevices by UFS shutdown, and at that time the audio...