CVE-2017-13218

The CVE-2017-13218 entry documents a side-channel information-disclosure vulnerability caused by access to CNTVCT_EL0 in various ARM-based devices (e.g., Small Cell SoC, Snapdragon lines). Affected components include listed CPUs/SoCs (FSM9055, IPQ4019, IPQ8064, MDM9xxx, SD series, etc.) and relat...

npr.org XSS vulnerability

Vulnerable URL: http://www.npr.org/templates/search/index.php?dateId=0=brandy+clark=match=match=0=x%22%3E%3CsvG%20onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.09.2017 Latest check for patch:| 08.09.2017 18:52 GMT Vulnerability type:| XSS...

Amazon Linux AMI : openssh (ALAS-2015-625)

A flaw was found in the way OpenSSH handled PAM authentication when using privilege separation. An attacker with valid credentials on the system and able to fully compromise a non-privileged pre-authentication process using a different flaw could use this flaw to authenticate as other users. It w...

Amazon Linux: Security Advisory (ALAS-2015-625)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...