CVE-2024-1460: Exposure of Sensitive Information to an Unauthorized Actor

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443: NULL Pointer Dereference

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

The vulnerability of the `sys_membarrier` function in the `membarrier` component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sysmembarrier function in the membarrier component of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-8337

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the btrfs component of the Linux kernel and involves an error in handling chunk tree lookup in the btrfs relocate sys chunks function. This error can lead to...

sys-worx.net Improper Access Control vulnerability OBB-3863514

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2021-46957

In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...

CVE-2021-46957

In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...

AZL-40024 CVE-2024-26602 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sysmembarrier On some systems, sysmembarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize the accesses to preve...

GLSA-202402-30 : Glances: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-30 Glances: Arbitrary Code Execution Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. @NOAGENT@ The descriptiv...

PT-2024-5375 · Zemana · Zemana Antilogger

Name of the Vulnerable Software and Affected Versions: Zemana AntiLogger version 2.74.204.664 Description: The issue is related to the incorrect validation of a critical resource in the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in Zemana AntiLogger. This can be exploited...

Fedora: Security Advisory for rust-libgit2-sys (FEDORA-2024-993d3a78dd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: rust-libgit2-sys-0.16.2-1.fc38

Native bindings to the libgit2 library...

[SECURITY] Fedora 39 Update: rust-libgit2-sys-0.16.2-1.fc39

Native bindings to the libgit2 library...

Fedora: Security Advisory for rust-libgit2-sys (FEDORA-2024-8ba389815f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dav1d AV1 decoder integer overflow

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0016...

PT-2024-4402

Name of the Vulnerable Software and Affected Versions dav1d versions prior to 1.4.0 libdav1d-sys versions prior to 0.7.0 CoreMedia and WebRTC in Apple devices affected versions not specified Description The issue is related to an integer overflow in the dav1d AV1 decoder that can occur when...

[SECURITY] Fedora 38 Update: rust-vmm-sys-util-0.12.1-2.fc38

A system utility set...

Fedora: Security Advisory for rust-vmm-sys-util (FEDORA-2024-f2305d485f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-23440

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer...