10927 matches found
CVE-2022-24351
TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process...
CVE-2022-24351
TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process...
Race condition
TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process...
PT-2023-12746 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: InsydeH2O versions 5.2 before 05.27.29 InsydeH2O versions 5.3 before 05.36.29 InsydeH2O versions 5.4 before 05.44.13 InsydeH2O versions 5.5 before 05.52.13 Description: A TOCTOU race-condition issue allows an attacker to alter data and code...
Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.4 release and security update
Red Hat Integration Camel for Spring Boot 3.20.4 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.2 release security update
Red Hat Integration Camel for Spring Boot 4.0.2 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
IceCMS Security Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version 2.0.1, which originates from the presence of an unknown part of /WebResource/resource in the Love Handler component...
IceCMS Information Disclosure Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation of NgShow individual developers. An information leakage vulnerability exists in IceCMS version 2.0.1, which originates from the presence of an unknown function in /adplanet/PlanetUser in the API...
This Week in Spring - December 12th, 2023
Hi, Spring fans! Welcome to a new installment of This Week in Spring! We've got a ton of stuff to get into, so let's dive right in! Laur Spilca and I look at how to ugprade a Spring Security 5.x application to Spring Security 6.x. Apache SkyWalking with Sheng Wu and Apache ShardingSphere with...
CVE-2023-48424
U-Boot shell vulnerability resulting in Privilege escalation in a production device...
CVE-2023-48424
U-Boot shell vulnerability resulting in Privilege escalation in a production device...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
Privilege escalation
U-Boot shell vulnerability resulting in Privilege escalation in a production device...
Code injection
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...
CVE-2023-48424
CVE-2023-48424 is an elevation of privilege flaw in the U-Boot shell affecting Chromecast/AMLogic bootloader components, described as enabling privilege escalation on a production device. The Chromecast Security Bulletin (Chromecast 2023-12-01) places CVE-2023-48424 under AMLogic with High severi...