PT-2023-9338 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a refcount leak in the amd pmc probe function of the Linux kernel. The pci get domain bus and slot function takes a reference, which the caller should release b...

CVE-2022-3841

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery SSRF vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes RHACM. An attacker could take advantage of this as the console API endpoint is missing an...

AMD Secure Processor 缓冲区错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. ASP AMD Secure Processor suffers from a security vulnerability that stems from insufficient boundary checking. An attacker exploits the vulnerability to write partially controlled data to the SMM or SEV-E...

AMD System Management Unit(SMU) 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation and could allow an attacker to incorrectly lock down resources, resulting in a denial of...

AMD System Management Unit(SMU) 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation of BIOS mailbox messages, which could lead to an out-of-bounds memory read that could result...

AMD Secure Processor 安全漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV, which stems from insufficient authentication of commands, which...

PT-2023-3061 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions 22.1R2 through 22.1R2, 22.1 versions prior to 22.1R3, 22.2 versions prior to 22.2R2 Junos OS Evolved versions 21.3R3-EVO and later versions, 21.4R1-S2-EVO, 21.4R2-EVO and later versions prior to 21.4R2-S1-EVO, 22.1R2-EVO and...

多款AMD产品 输入验证错误漏洞

AMD System Management Mode and others are products of Ultraviolet Semiconductor AMD, Inc.AMD System Management Mode is a system management mode. A CPU execution mode.AMD System Management Unit SMU is a system management unit.AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip. Multiple A...

AMD Secure Processor 输入验证错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor. An attacker could exploit this vulnerability to cause an integer overflow, resulting in a denial of service...

AMD System Management Unit(SMU) 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation and could allow a physical attacker to disclose the contents of memory over the I2C bus,...

AMD System Management Unit 缓冲区错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. The AMD System Management Unit has a security vulnerability that stems from the fact that its software interface between the ASP and the SMU may not enforce the SNP memory security policy, leading to a...

PT-2023-1014

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An elevation of privilege issue exists in the Windows kernel Advanced Local Procedure Call ALPC subsystem. The flaw is caused by a use-after-free condition where an ALPC message...

PT-2023-15648 · Arm · Armv8

Name of the Vulnerable Software and Affected Versions: ARMv8 affected versions not specified Description: The AES instructions on the ARMv8 platform do not have an algorithm that is intrinsically resistant to side-channel attacks. The vendor notes that while power side channel attacks are possibl...

PT-2023-1485 · Amd · Amd Secure Encrypted Virtualization (Sev) Firmware

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description: The issue is related to improper input validation and bounds checking in the SEV firmware, which may cause a buffer overflow in memory. This could...

Siemens Multiple Denial of Service in Industrial Products (CVE-2021-40365)

A vulnerability has been identified in SIMATIC Drive Controller family, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants, SIMATIC S7-1200 CPU family incl. SIPLUS variants, SIMATIC S7-1500 CPU 1510SP F-1 PN, SIMATIC S7-1500 CPU 1510SP-1 PN, SIMATIC S7-1500 CPU 1511-1 PN, SIMAT...

Siemens Multiple Denial of Service in Industrial Products (CVE-2021-44693)

A vulnerability has been identified in SIMATIC Drive Controller family, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants, SIMATIC S7-1200 CPU family incl. SIPLUS variants, SIMATIC S7-1500 CPU 1510SP F-1 PN, SIMATIC S7-1500 CPU 1510SP-1 PN, SIMATIC S7-1500 CPU 1511-1 PN, SIMAT...

The Bug Report December 2022 Edition

The Bug Report — December 2022 Edition By Trellix · January 4, 2023 This story was also written by John Borrero Rodriguez Everyone gets it Why am I here? Ho Ho Ho! Welcome back to the Bug Report, or a more fitting name for this time of year: The NAUGHTY List! Yes, we checked it twice. It is no...

CVE-2022-42475

A heap-based buffer overflow vulnerability CWE-122 in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute...

Genesis Columns Advanced < 2.0.4 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks which could be used against high-privilege users such as admins. 1. Insert t...

WordPress Genesis Columns Advanced Plugin < 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Genesis Columns Advanced Type Plugin Vulnerable versions 2.0.4 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4706 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID f94799f31fa9 Credits István Márt...