3842 matches found
CVE-2022-21133
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-21133
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-21133
CVE-2022-21133 concerns Intel® Trace Analyzer and Collector before version 2021.5. An authenticated user can trigger an out-of-bounds read, potentially enabling denial of service via local access. The advisory specifies the affected product and version, with a remediation to upgrade to 2021.5 or ...
Intel Trace Analyzer And Collector 缓冲区错误漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...
Intel Trace Analyzer And Collector 缓冲区错误漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...
Intel Trace Analyzer And Collector 缓冲区错误漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...
Intel Trace Analyzer and Collector 安全漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer and Collector that stems from a potential security flaw in Intel Trace Analyzer and Collector. ...
Intel® Trace Analyzer and Collector Advisory
Summary: Potential security vulnerabilities in the Intel® Trace Analyzer and Collector may allow denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21133 Description: Out-of-bounds re...
Security Bulletin: Vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Spectrum Protect Snapshot for VMware (CVE-2019-4304, CVE-2019-4305, CVE-2019-4441, CVE-2014-3603)
Summary Security vulnerabilities in WebSphere Application Server Liberty, such as spoofing, obtaining sensitive information, and bypassing security restrictions, affect IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for VMware. Vulnerability Details CVEID: CVE-2019-4304...
Important: kernel
Issue Overview: In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h. CVE-2019-19769 A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem. This flaw occurs while importing the Commercial...
Important: kernel
Issue Overview: A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack. This issue occurs when the protection mechanism neglects the possibility of uninitialized memory locations on the BPF...
Vulnerabilities that aren’t. Cross Site Tracing / XST
This is the first of my posts that explain why some common security vulnerabilities are most likely not real threats. They should be treated as security enhancements rather than vulnerabilities. Bearing in mind the number of scanning tools that rate such vulnerabilities as "high" its no wonder...
PT-2025-8555
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue occurs in the Linux kernel when the verdict is NF STOLEN, potentially allowing access to freed memory. This happens when tracing is enabled and can involve accessi...
PT-2025-8547 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the nvme component, where a change has been made to use a struct group for generic command dwords. This...
Wireshark 3.6.x < 3.6.1 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.1 advisory. - Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted...
Debian DLA-2843-1 : linux - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2843 advisory. - Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listene...
Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g. when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function.
...
CVE-2021-41090
Grafana Agent prior to versions 0.20.1 and 0.21.2 exposed inline secrets in plaintext via endpoints ./-/config and /agent/api/v1/configs/:key, enabling potential information disclosure if the endpoint is reachable without HTTPS client auth. The issue affects metrics/secret configurations used for...
IBM MQ Appliance Information Disclosure Vulnerability (CNVD-2021-92962)
IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. The IBM MQ Appliance is vulnerable to an information disclosure vulnerability that could be exploited by a local attacker to obtain sensitive information by including sensitiv...
