CVE-2024-26022

Improper access control in some IntelR UEFI Integrator Tools on Aptio V for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38127

Windows Hyper-V Elevation of Privilege Vulnerability...

CVE-2024-38127

Windows Hyper-V Elevation of Privilege Vulnerability...

USN-6949-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - M68K architecture; - OpenRISC architecture; - PowerPC architecture; -...

USN-6949-2 linux-lowlatency, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - M68K architecture; - OpenRISC architecture; - PowerPC architecture; -...

CVE-2024-38127

CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...

CVE-2024-38127 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2024-38127 Windows Hyper-V Elevation of Privilege Vulnerability

...

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

A team of researchers from the CISPA Helmholtz Center for Information Security in Germany has disclosed an architectural bug impacting Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs that could allow attackers to gain unrestricted access to susceptible devices. The vulnerability h...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6949-2)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6949-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

Giftora 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : Giftora V 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | | Vendor :...

PT-2024-21281 · Intel · Intel Uefi Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR UEFI Integrator Tools on Aptio V for IntelR NUC affected versions not specified Description: The issue is related to improper access control in IntelR UEFI Integrator Tools on Aptio V for IntelR NUC, which may allow an authenticated us...

PT-2024-5593 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system. Recommendations: At the moment,...

Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6952-2)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6952-2 advisory. Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and...

USN-6955-1 linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - M68K architecture; - OpenRISC architecture; - PowerPC architecture; -...

USN-6955-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - M68K architecture; - OpenRISC architecture; - PowerPC architecture; -...

CVE-2024-40500

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6955-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6955-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

USN-6952-1: Linux kernel vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to...

Hyper-V SureBackup Task Failure: "VM was created with the later version of Hyper-V than the one installed on host"

Challenge A task within a SureBackup job for a Hyper-V environment fails with the error: Error: VM was created with the later version of Hyper-V than the one installed on host Cause This error occurs when the Virtual Lab in use by the SureBackup job is located on a host that is running a version ...