Omnient

Vulnerabilities

Newest CVEs

  • CVE-2024-52938

    High Severity Description Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write of data outside the Guest's virtualised GPU memory. Read more at https://www.tenable.com/cve/CVE-2024-52938

  • CVE-2024-52937

    Severity Not Scored Description Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. Read more at https://www.tenable.com/cve/CVE-2024-52937

  • CVE-2024-52935

    Severity Not Scored Description Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. Read more at https://www.tenable.com/cve/CVE-2024-52935

  • CVE-2024-47894

    High Severity Description Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. Read more at https://www.tenable.com/cve/CVE-2024-47894

  • CVE-2024-47895

    High Severity Description Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. Read more at https://www.tenable.com/cve/CVE-2024-47895

Updated CVEs

  • CVE-2025-0398
    on January 12, 2025 at 2:15 pm

    Medium Severity Description A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Read more at https://www.tenable.com/cve/CVE-2025-0398

  • CVE-2024-51456
    on January 12, 2025 at 2:15 pm

    Medium Severity Description IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks. Read more at https://www.tenable.com/cve/CVE-2024-51456

  • CVE-2025-0397
    on January 12, 2025 at 1:15 pm

    Medium Severity Description A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Read more at https://www.tenable.com/cve/CVE-2025-0397

  • CVE-2025-0396
    on January 12, 2025 at 12:15 pm

    High Severity Description A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulation leads to command injection. It is possible to launch the attack on the local host. Upgrading to version 2.11.22 is able to address this issue. It is recommended to upgrade the affected component. Read more at https://www.tenable.com/cve/CVE-2025-0396

  • CVE-2021-29669
    on January 12, 2025 at 2:15 am

    Medium Severity Description IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Read more at https://www.tenable.com/cve/CVE-2021-29669

Contact Form