201 matches found
AZL-53007 CVE-2024-50243 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...
DEBIAN-CVE-2024-50243
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...
UBUNTU-CVE-2024-50243
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...
CVE-2024-50243 fs/ntfs3: Fix general protection fault in run_is_mapped_full
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...
CVE-2024-50243 fs/ntfs3: Fix general protection fault in run_is_mapped_full
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...
Fault Injection
Overview Affected versions of this package are vulnerable to Fault Injection through the wced25519signmsg function. An attacker can disclose sensitive information and escalate privileges by exploiting the Rowhammer fault injection technique to manipulate the ed25519key structure. This is only...
UBUNTU-CVE-2024-1545
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the...
New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers
Cybersecurity researchers have disclosed details of an ongoing phishing campaign that leverages recruiting- and job-themed lures to deliver a Windows-based backdoor named WARMCOOKIE. "WARMCOOKIE appears to be an initial backdoor tool used to scout out victim networks and deploy additional...
DEBIAN-CVE-2024-28285
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges...
CVE-2022-48700
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-48700
CVE-2022-48700 affects the Linux kernel VFIO (type1) path, specifically an issue titled “Unpin zero pages.” The connected Nessus entry explicitly references “vfio/type1: Unpin zero pages (CVE-2022-48700),” indicating the vulnerability resides in the VFIO code path and is tied to unpinning of zero...
Improper access control
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows clie...
SKYSEA Client View Security Vulnerability
SKYSEA Client View is an enterprise IT asset management tool from SKY Japan. A security vulnerability exists in SKYSEA Client View versions Ver.11.220 through Ver.19.2, which stems from improper access control of a resident process...
CVE-2024-2065
A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument fullname leads to cross site scripting. The...
CVE-2024-2065
A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument fullname leads to cross site scripting. The...
PT-2024-18690 · Sourcecodester · Sourcecodester Barangay Population Monitoring System
Name of the Vulnerable Software and Affected Versions: SourceCodester Barangay Population Monitoring System versions up to 1.0 Description: A vulnerability was found in the system, affecting some unknown functionality of the file "/endpoint/update-resident.php". The manipulation of the full name...
Barangay Population Monitoring System Cross-Site Scripting Vulnerability
Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System up to version 1.0, which stems from a cross-site scripting issue in the...