21206 matches found
NVIDIA vGPU 资源管理错误漏洞
NVIDIA vGPU is a virtual GPU technology from NVIDIA. A resource management error vulnerability exists in NVIDIA vGPU that stems from allowing a guest to consume uncontrolled resources, which could result in a denial of service...
NVIDIA Virtual GPU Manager DoS (CVE-2025-23245) (April 2025)
The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by denial of service vulnerability: - NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to access...
CVE-2025-21416
Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...
CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability
...
CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability
...
CVE-2025-21416
CVE-2025-21416 describes a privilege elevation vulnerability in Microsoft Azure Virtual Desktop caused by missing authorization. The issue enables an authorized attacker, over a network, to elevate privileges within affected environments. Documents consistently reference Azure Virtual Desktop, wi...
Azure Virtual Desktop Elevation of Privilege Vulnerability
Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...
kernel: ELF: fix kernel.randomize_va_space double read
In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences. Issue exactly on...
kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy run-time warning in dgdispatchashost The Linux kernel CVE team has assigned CVE-2024-35944 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051920-CVE-2024-35944-a860@gregkh/T...
A Comprehensive Study of Exploitable Patterns in Smart Contracts: from Vulnerability to Defense
With the rapid advancement of blockchain technology, smart contracts have enabled the implementation of increasingly complex functionalities. However, ensuring the security of smart contracts remains a persistent challenge across the stages of development, compilation, and execution...
The vulnerability of the virtual learning environment web service Moodle allows a perpetrator to gain unauthorized access to user data.
The vulnerability of the Moodle virtual learning environment’s web service is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...
The vulnerability of the mod_data module in the virtual training environment Moodle, which allows a intruder to gain unauthorized access to protected information
The vulnerability of the moddata module in the virtual training environment Moodle is related to the disclosure of information through query strings. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Microsoft Azure Virtual Desktop 安全漏洞
Microsoft Azure Virtual Desktop is an Azure cloud-based virtual desktop and application delivery service from Microsoft Corporation USA that supports multi-user Windows virtualized environments. A security vulnerability exists in Microsoft Azure Virtual Desktop that stems from a lack of...
Whispers of Data: Unveiling Label Distributions in Federated Learning through Virtual Client Simulation
Federated Learning enables collaborative training of a global model across multiple geographically dispersed clients without the need for data sharing. However, it is susceptible to inference attacks, particularly label inference attacks. Existing studies on label distribution inference exhibits...
PT-2025-18299 · Microsoft · Azure Virtual Desktop
Name of the Vulnerable Software and Affected Versions: Azure Virtual Desktop affected versions not specified Description: The issue is related to missing authorization in Azure Virtual Desktop, which allows an authorized attacker to elevate privileges over a network. Recommendations: At the momen...
Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor
🔐 CVE-2023-32243 – Detection and Mitigation in WordPress 📘...
WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy
Popular messaging app WhatsApp on Tuesday unveiled a new technology called Private Processing to enable artificial intelligence AI capabilities in a privacy-preserving manner. "Private Processing will allow users to leverage powerful optional AI features – like summarizing unread messages or...
VApps: Verifiable Applications at Internet Scale
Blockchain technology promises a decentralized, trustless, and interoperable infrastructure. However, widespread adoption remains hindered by issues such as limited scalability, high transaction costs, and the complexity of maintaining coherent verification logic across different blockchain layer...
PT-2025-22174
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue concerns the ice vc add fdir fltr function, where a null pointer check is required on the return value of ice get vf vsi...