CVE-2024-3175

Google Chrome versions prior to 120.0.6099.62 are affected by a vulnerability in the Extensions component. The root cause is insufficient data validation of input data, which could allow a remote attacker to perform privilege escalation by utilizing a specially crafted Chrome Extension. Exploitat...

CVE-2024-3170

CVE-2024-3170 affects Google Chrome prior to 121.0.6167.85, where a Use-after-Free in WebRTC could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue is in Chromium’s WebRTC handling and is addressed by updating Chrome to 121.0.6167.85 or later. Public exploits ex...

CVE-2024-3169

The CVE-2024-3169 issue affects Google Chrome (V8/Chromium) and is caused by a Use after free in V8, leading to potential heap corruption via a crafted HTML page. Affected software includes Google Chrome with V8, prior to 121.0.6167.139. Impact is high: remote attacker could potentially exploit t...

CVE-2024-2884

CVE-2024-2884 describes an out-of-bounds read in V8 (Chrome’s JavaScript engine) that could be triggered by a crafted HTML page. Affected product: Google Chrome (Linux/Mac/Windows) with versions prior to 121.0.6167.139. Root cause is an out-of-bounds memory access in V8, allowing remote attackers...

CVE-2023-7013

CVE-2023-7013 affects Google Chrome’s Compositing component. The vulnerability arises from an inappropriate implementation that could allow a remote attacker to spoof the security UI via a crafted HTML page. Affected software is Chrome; root cause is within the Compositing path leading to UI spoo...

CVE-2024-3168

CVE-2024-3168 corresponds to a Use-after-free vulnerability in Chrome DevTools prior to 122.0.6261.57 that could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected product is Google Chrome (DevTools component); root cause is a use-after-free in DevTools as describe...

CVE-2023-7011

CVE-2023-7011 describes an improper implementation in Google Chrome’s Picture in Picture (PiP) feature that allowed a remote attacker to spoof the Omnibox contents via a crafted HTML page. Affected software is Google Chrome (PiP module) prior to version 119.0.6045.105. The underlying issue is an ...

CVE-2022-48853

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP test covering cve-2018-1000204. A short description of what happens follows: 1 The test case issues a command code 00 TEST UNIT READY...

CVE-2022-48853 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP test covering cve-2018-1000204. A short description of what happens follows: 1 The test case issues a command code 00 TEST UNIT READY...

CVE-2022-48853 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP test covering cve-2018-1000204. A short description of what happens follows: 1 The test case issues a command code 00 TEST UNIT READY...

CVE-2022-48853

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP test covering cve-2018-1000204. A short description of what happens follows: 1 The test case issues a command code 00 TEST UNIT READY...

CVE-2022-48840 iavf: Fix hang during reboot/shutdown

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot/shutdown Recent commit 974578017fc1 "iavf: Add waiting so the port is initialized in remove" adds a wait-loop at the beginning of iavfremove to ensure that port initialization is finished prior...

CVE-2022-48830 can: isotp: fix potential CAN frame reception race in isotp_rcv()

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotprcv When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The...

EulerOS 2.0 SP10 : llvm (EulerOS-SA-2024-1890)

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto...

SUSE CVE-2024-26759

In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...

Error: "Remote license server is not compatible" after upgrading to XMS 10.8.23

After upgrading the server to XenMobile server to 10.8.23 Unable to access remote licenses...

XenMobile: Unable to enroll devices Error: "Username and Password are Incorrect"

User is unable to enroll in XenMobile After entering username and password in SecureHub usersreceive the error: "Incorrect Username and Password are Incorrect" Users are able to authenticate in windows with the same credentials...

VMware vSphere 5.5 - Communication Issue from Studio Console

Hosting a VMware vSphere 5.5 server through XenDesktop or XenApp Studio displays the following error:...

When Load Balancing StoreFront on NetScaler all Connections Go to One Server in NetScaler Gateway Set Up

StoreFront servers are not load balanced; all connections go to one server in NetScaler Gateway set up. Following is a screen shot of the status of load balanced servers:...

CVE-2024-38709

CVE-2024-38709 corresponds to a Local File Inclusion in the WordPress plugin GD Rating System (versions <= 3.6). The underlying issue is path traversal that allows including restricted files via the plugin’s handling of file paths. Public entries consistently identify the affected software as ...