vm-plate.de Cross Site Scripting vulnerability OBB-3722534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: java-1.8.0-openjdk

Issue Overview: An issue was discovered in function ciMethodBlocks::makeblockat in Oracle JDK HotSpot VM 11, 17 and OpenJDK HotSpot VM 8, 11, 17, allows attackers to cause a denial of service. CVE-2022-40433 Affected Packages: java-1.8.0-openjdk Note: This advisory is applicable to Amazon Linux 2...

CVE-2023-22382

Weak configuration in Automotive while VM is processing a listener request from TEE...

CVE-2023-21673

Improper Access to the VM resource manager can lead to Memory Corruption...

Design/Logic Flaw

Weak configuration in Automotive while VM is processing a listener request from TEE...

Memory corruption

Improper Access to the VM resource manager can lead to Memory Corruption...

CVE-2023-22382

CVE-2023-22382 concerns a weak configuration in the Automotive stack when a VM processes a listener request from a Trusted Execution Environment (TEE). Documents indicate the issue lies in the Automotive VM/TEE interaction with a broad impact, including high confidentiality, integrity, and availa...

CVE-2023-21673 Improper Access Control in Kernel

Improper Access to the VM resource manager can lead to Memory Corruption...

CVE-2023-21673 Improper Access Control in Kernel

Improper Access to the VM resource manager can lead to Memory Corruption...

CVE-2023-21673

CVE-2023-21673 is documented across multiple feeds as an issue with Qualcomm components, described as improper access to the VM resource manager that can lead to memory corruption. The linked sources (NVD/Red Hat/PRION/VulnEnrichment) frame the vulnerability as affecting Qualcomm kernel-related c...

PT-2023-18334 · Qualcomm · Snapdragon +140

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves improper access to the VM resource manager, which can lead to memory corruption. There is no information provided about the estimated...

Debian: Security Advisory (DLA-3597-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3597 : open-vm-tools - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3597 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3597-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3597-1] open-vm-tools security update

Debian LTS Advisory DLA-3597-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 01, 2023 https://wiki.debian.org/LTS Package : open-vm-tools Version : 2:10.3.10-1+deb10u5 CVE ID : CVE-2023-20900 Debian Bug : 1050970 A security vulnerability was found in the...

DLA-3597-1 open-vm-tools - security update

Bulletin has no description...

Security Bulletin: IBM Operational Decision Manager September 2023 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-2253...

SUSE: Security Advisory (SUSE-SU-2023:3835-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 : Security update for open-vm-tools (SUSE-SU-2023:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3835-1 advisory. - A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-...

SUSE-SU-2023:3835-1 Securitys update for open-vm-tools

This update for open-vm-tools fixes the following issues: Update to 12.3.0 build 22234872 bsc1214850 - There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, including: - This release integrates CVE-2023-20900...

Fedora 37 : firecracker (2023-1db67725f2)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1db67725f2 advisory. Rebuild dependent packages for vm-memory v0.12.2 to address CVE-2023-41051 / RUSTSEC-2023-0056. - https://vulners.com/cve/CVE-2023-41051 -...