456 matches found
Unspecified Vulnerability in Intel Ethernet 700 Series Controllers (CNVD-2021-17791)
Intel Ethernet 700 Series Controllers is a 700 series Ethernet controller from Intel Corporation USA. A security vulnerability exists in IntelR Ethernet 700 Series Controllers prior to version 7.3, which is caused due to insufficient access control and can be exploited by a privileged user to...
Denial Of Service (DoS)
linux-kvm is vulnerable to denial of service. Resource leak in the i40e driver for IntelR Ethernet 700 Series Controllers allows an authenticated user to potentially cause a denial of service condition via local access...
CVE-2020-8693
Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...
CVE-2020-8690
Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...
CVE-2020-8690
Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...
CVE-2020-8692
Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...
Improper access control
Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...
CVE-2020-8691
CVE-2020-8691 is a vulnerability in the firmware of Intel(R) Ethernet 700 Series Controllers. The issue is a logic flaw in the firmware that may allow a privileged user to escalate privileges and/or cause a denial of service via local access. Affected products are Intel Ethernet 700 Series Contro...
HPESBHF04061 rev.1 - HPE Ethernet Adapters with Intel 700 Series Based Controllers, Local Escalation of Privileges and/or Denial of Service
Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 4610C 10/25Gb Ethernet Adapter - Prior to v8.1 HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter - Prior to v7.3 HPE Ethernet 10Gb 2-port...
Intel® Ethernet 700 Series Controller Advisory
Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8693 Description: Improper buff...
PT-2020-19098 · Sap · Sap Netweaver As Abap
Name of the Vulnerable Software and Affected Versions: SAP Netweaver AS ABAP versions 700 through 755 Description: The issue allows an unauthenticated attacker to send a polluted URL to the victim. When the victim clicks on this URL, the attacker can read and modify the information available in t...
CVE-2020-6296
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application...
Denial of Service Vulnerability in VisualField VF***.dll Component at Zhejiang ZDAC Information Technology Co.
VisualField VF for short is a software package for control system configuration and monitoring for the ECS-700 system. A denial of service vulnerability exists in the VisualField VF.dll component of Zhejiang ZDZC Information Technology Co. An attacker can exploit this vulnerability to cause the...
PT-2020-14195 · Coreos +3 · Etcd +3
Name of the Vulnerable Software and Affected Versions: etcd versions 3.3.23 and earlier etcd versions 3.4.10 and earlier Description: The issue concerns the creation of certain directory paths with restricted access permissions by using the os.MkdirAll function, which does not perform permission...
Foodora suffers data breach 700,000+ users in 14 countries affected
By Deeba Ahmed Berlin-based Delivery Hero, the parent company of Foodora has acknowledged the breach. This is a post from HackRead.com Read the original post: Foodora suffers data breach 700,000+ users in 14 countries affected...
Joomla suffers security breach exposing user records
By Deeba Ahmed It total, 2,700 Joomla user records were exposed, Hackread.com has learned. This is a post from HackRead.com Read the original post: Joomla suffers security breach exposing user records...
700.lt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1169081 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5670)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5670 advisory. - brcmfmac: add subtype check for event handling in data path John Donnelly Orabug: 30776354 CVE-2019-9503 - mwifiex: pcie: Fix memory leak in...
HPESBHF03970 rev.2 - HPE Products with Intel Ethernet 700 Series Processors, Local Escalation of Privilege, Local Denial of Service
Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port 562FLR-SFP+ Adapter - Prior to SPP 2019.12.0 - See Resolution for OS-specific HPE Intel Online Firmware Utility versions for...
CVE-2020-6213
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...