9359 matches found
GSD-2021-1002258 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
x86/hyperv: Fix NULL deref in sethvtscchangecb if Hyper-V setup fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...
UVI-2021-1002258 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
x86/hyperv: Fix NULL deref in sethvtscchangecb if Hyper-V setup fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...
GSD-2021-1002246 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
x86/hyperv: Fix NULL deref in sethvtscchangecb if Hyper-V setup fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...
UVI-2021-1002246 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
x86/hyperv: Fix NULL deref in sethvtscchangecb if Hyper-V setup fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...
Huawei HarmonyOS multi-user settings issue vulnerability
Huawei HarmonyOS is an operating system from Huawei, China. Huawei HarmonyOS is vulnerable to a multi-user setup issue. An attacker could exploit this vulnerability to compromise confidentiality...
Registry-Recon - Cobalt Strike Aggressor Script That Performs System/AV/EDR Recon
Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon. Author: Jess Hires Description As a red-team practitioner, we are often using tools that attempt to fingerprint details about a compromised system, preferably in the most stealthy way possible. Some of our usual tooling for this...
NetworkManager security, bug fix, and enhancement update
1.32.10-4.0.1 - add connectivity check via Oracle servers Orabug: 32051972 - Disable the build of NetworkManager-config-connectivity- subpackage for 8.3 1:1.32.10-4 - revert unapproved patches part of 'cloud-setup' change rh 1977984 1:1.32.10-3 - preserve the IPv6 multicast route added by kernel ...
CVE-2021-1981
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-1981
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-1981
CVE-2021-1981 involves a buffer over-read caused by an improper Bearer capability IE size check in MT setup requests from the network. It affects Qualcomm/Qualcomm closed‑source components used in Snapdragon platforms, including Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT...
CVE-2021-1981: Out-of-bounds Read
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
Antilles 代码问题漏洞
Lenovo Antilles is an open-source infrastructure management software for high performance computing Hpc from Lenovo, China. A security vulnerability exists in versions of Antilles open-source software prior to 1.0.1, which stems from the non-existence of packages listed in requirements.txt in the...
kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c
A use after free flaw in the Linux kernel network block device NBD subsystem was found in the way user calls an ioctl NBDSETSOCK at a certain point during device setup...
kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c
A use after free flaw in the Linux kernel network block device NBD subsystem was found in the way user calls an ioctl NBDSETSOCK at a certain point during device setup...
Brave Android 1.31.91 Security Fixes
Clarified sync setup instructions...
CVE-2021-3774
Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...
Cross site request forgery (csrf)
Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...
PT-2021-21854 · Meross · Meross Smart Wi-Fi 2 Way Wall Switch
Name of the Vulnerable Software and Affected Versions: Meross Smart Wi-Fi 2 Way Wall Switch MSS550X versions 3.1.3 and earlier Description: The issue allows a remote attacker to obtain the Wi-Fi SSID and the password configured by the user from the Meross app via an Http/JSON plain request. This ...
SUSE: Security Advisory (SUSE-SU-2021:3611-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
