mozilla: Out of bounds memory access in graphics shared memory handling

The Mozilla Foundation Security Advisory describes this flaw as: Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape...

mozilla: Out of bounds memory access in graphics shared memory handling

The Mozilla Foundation Security Advisory describes this flaw as: Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape...

PCI device pass-through with shared resources

ISSUE DESCRIPTION When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration canno...

CVE-2024-42377

SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application...

CVE-2024-42377

SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application...

CVE-2024-42376

SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application...

CVE-2024-42376

SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application...

CVE-2024-42377 Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application...

CVE-2024-42377

CVE-2024-42377 concerns the SAP Shared Service Framework. The connected documents describe that an authenticated non-administrative user can call a remote-enabled function, enabling insertion of value entries into a non-sensitive table and resulting in low integrity impact to the application. The...

CVE-2024-42376 Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application...

CVE-2024-42376

The CVE concerns SAP Shared Service Framework with a missing authorization check for an authenticated user, enabling privilege escalation. Affected software is SAP Shared Service Framework; the underlying cause is an authorization check omission, leading to high confidentiality impact if exploite...

PT-2024-6179 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an Elevation of Privilege vulnerability in the Windows Kernel-Mode Driver. It is caused by synchronization errors when using a shared resource,...

PT-2024-5649 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their privileges. The estimated...

SAP Shared Service Framework 安全漏洞

SAP Shared Service Framework is an integration platform from SAP, Germany, designed to support the operation and management of shared services within an organization. A security vulnerability exists in SAP Shared Service Framework that stems from not performing the required authorization checks o...

PT-2024-6384

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue arises when multiple devices share resources and one of them is passed through to a guest, making it impossible to guarantee the security of the entire system and individual guests...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is caused due to a failure to disallow the modification of local channels by a remote, when shared channels are enabled. This allows a malicious remote user to make an arbitrary local channel...

MAL-2024-8021 Malicious code in cchome-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23cf31f8fd8c52d5feb6420c83e49c350213e20f6572b6498632af703d11a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cchome-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23cf31f8fd8c52d5feb6420c83e49c350213e20f6572b6498632af703d11a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-6127

Name of the Vulnerable Software and Affected Versions SAP Shared Service Framework affected versions not specified Description The issue is related to the SAP Shared Service Framework, which does not perform necessary authorization checks for authenticated users. This results in an escalation of...

PT-2024-6828 · Sap · Sap Shared Service Framework

Name of the Vulnerable Software and Affected Versions: SAP Shared Service Framework affected versions not specified Description: The issue is related to insufficient authorization procedures in the SAP Shared Service Framework, allowing a remote attacker to elevate their privileges. An...