2561 matches found
CVE-2024-36965 remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM L2TCM size that is defined in the...
SUSE CVE-2024-27322
Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS R Data Serialization formatted file or R package to run arbitrary code on an end user's system when interacted...
Fedora: Security Advisory for R (FEDORA-2024-bc590cb3f1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-07b7b83a4f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-40785 · Git +1 · Libultrahdr
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the ultrahdr::getYuv420Pixel function. This function is called by...
n-e-r-v-o-u-s.com Cross Site Scripting vulnerability OBB-3930116
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-52775
In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol...
CVE-2023-52775
In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol...
CVE-2023-52775
CVE-2023-52775 is a Linux kernel vulnerability affecting net/smc where a Decline message could cross or collide in SMC-R, causing data corruption during Redis/SRC testing. A patch doubles the client timeout to 2x the server value to prevent cross‑timeout conflicts; remediation is upgrading to a k...
The vulnerability of the R programming language interpreter, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code in the target system.
The vulnerability of the R programming language interpreter is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially created RDS and .rdx files...
CVE-2024-21841
Uncontrolled search path for some IntelR Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-21818
Uncontrolled search path in some IntelR PCM software before version 202311 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-35192
CVE-2023-35192 concerns Intel GPA Framework (and Intel GPA software) prior to version 2023.3, where an uncontrolled search path may allow an authenticated local user to escalate privileges. The vulnerability is described in Intel’s advisory (Intel-SA-00831) and corresponds to a local-privilege-es...
CVE-2023-48727
CVE-2023-48727 affects Intel oneVPL software prior to 23.3.5. The root cause is a NULL pointer dereference that may allow an authenticated local attacker to disclose information. The issue is rated low (CVSS 3.1: 3.3) with local attack vector and no user interaction. Remediation details are not p...
CVE-2023-41092
Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...
CVE-2024-22379
CVE-2024-22379 affects Intel® Inspector software (and HPC Toolkit) prior to version 2024.0, due to an uncontrolled search path that could let an authenticated local user escalate privileges. Impact is local and requires user interaction; CVSS base metrics indicate a Medium severity with high impa...
CVE-2024-21788
Uncontrolled search path in some IntelR GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
Huawei EulerOS: Security Advisory for mdadm (EulerOS-SA-2024-1659)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
