kernel: Linux kernel: Privilege escalation via out-of-bounds write in RDMA/siw

A flaw was identified in the Linux kernel RDMA siw implementation where an undefined opcode value could be used during immediate work request flushing while in an error state. The send queue element opcode was not correctly set, which could lead to an out-of-bounds access when mapping between the...

CVE-2023-48644

An issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate data, and so on...

CVE-2023-48644

A Cross-Site Scripting (XSS) vulnerability exists in the Archibus app version 4.0.3 for iOS within the maintenance module . The flaw is triggered via the description field in the create work request feature, allowing an attacker to perform actions on behalf of the user or exfiltrate data. To miti...

CVE-2023-48644

An issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate data, and so on...

PT-2024-13616 · Archibus · Archibus

Name of the Vulnerable Software and Affected Versions: Archibus app version 4.0.3 for iOS Description: An issue was discovered in the create work request feature of the maintenance module, via the description field. This allows an attacker to perform an action on behalf of the user, exfiltrate...

ARCHIBUS Cross-Site Scripting Vulnerability

ARCHIBUS is a software platform from ARCHIBUS focused on helping organizations effectively manage their real estate, facilities and infrastructure to improve efficiency, reduce costs and support strategic planning. A cross-site scripting vulnerability exists in ARCHIBUS version 4.0.3 iOS, which...

PT-2023-34499

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns an immediate work request flush to completion queue in RDMA/siw. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.3 through v5.15.85 Description The issue is related to the RDMA/siw component, specifically concerning the handling of immediate work request flush to completion queue. The actual impact and attack plausibility have no...