CVE-2024-45182

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

CVE-2024-45182

CVE-2024-45182 affects WIBU-SYSTEMS WibuKey64.sys in WibuKey before v6.70. The vulnerability arises from an improper bounds check that allows specially crafted packets to perform an arbitrary address read, leading to Denial of Service. It is fixed in v6.70. Affected components include the WibuKey...

CVE-2024-45181

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption...

CVE-2024-45182

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

CVE-2024-45182: Out-of-bounds Read

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

PT-2024-31465

Name of the Vulnerable Software and Affected Versions WIBU-SYSTEMS WibuKey versions prior to 6.70 Description An issue was discovered in WibuKey64.sys, allowing crafted packets to cause an arbitrary address write due to an improper bounds check, resulting in kernel memory corruption...

CVE-2024-45181: Out-of-bounds Write

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption...

PT-2024-31187 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys mgmt function. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys mgmt function as a temporary workaround...

PT-2024-31189 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...

Fedora: Security Advisory (FEDORA-2024-9974808629)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +8 more potentially affected by unknown CVE via olm-sys (1.3.2)

olm-sys CARGO version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on olm-sys and may be impacted: - alerter =0.3.0, =0.2.0, =0.3.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.13.0, =0.1.0, =0.4.0 Source cves: unknown CVE Source advisory:...

alerter (>=0.3.0, <=0.3.1), libmatrix-client (0.0.1) +10 more potentially affected by CVE-2024-45191 +2 more via olm-sys (>=0.1.5, <=1.3.2)

olm-sys CARGO version =0.1.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.1.0, =0.4.0 Source cves: CVE-2024-45191, CVE-2024-45192, CVE-2024-45193 Source advisory: OSV:RUSTSEC-2024-0368...

RUSTSEC-2024-0368 olm-sys: wrapped library unmaintained, potentially vulnerable

After several cryptographic vulnerabilities in libolm were disclosed publicly, the Matrix Foundation has officially deprecated the library. olm-sys is a thin wrapper around libolm and is now deprecated and potentially vulnerable in kind. Users of olm-sys and its higher-level abstraction, olm-rs,...

Oracle DB SQL Injection Via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SET

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection via SYS.DBMSCDCPUBLISH.CREATECHANGESET', 'Description' = %q The module exploits an sql injection flaw in the...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference', 'Description' = %q This module exploits an out of bounds function table...

Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference', 'Description' = %q This module triggers a NULL pointer dereference in the...

Uncontrolled Resource Consumption ('Resource Exhaustion')

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion'...

The vulnerability of the IOCTL Handler components in the zam64.sys and zamguard64.sys drivers of the Zemana AntiLogger software allows a hacker to induce a service failure.

The vulnerability of the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in the Zemana AntiLogger software is related to improper checking of ownership of critical resources. Exploiting this vulnerability allows an attacker to cause a service failure by executing the IOCTL...

CVE-2024-42103

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix adding block group to a reclaim list and the unused list during reclaim There is a potential parallel list adding for retrying in btrfsreclaimbgswork and adding to the unused list. Since the block group is removed from...

The vulnerability of the AsInsHelp64.sys driver, part of the DeviceIoControl utility in ASUS’ ASUS Fan Xpert computer and laptop fan control software, allows a hacker to execute arbitrary code, increase their privileges, or disclose sensitive information.

The vulnerability of the AsInsHelp64.sys driver, which is part of the DeviceIoControl utility in the ASUS ASUS Fan Xpert speed control software, relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, gain...