11021 matches found
The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows a perpetrator to disclose protected information
The vulnerability of the Secure Boot protocol for Windows operating systems is related to errors in accessing debug functions during the loading process. Exploiting this vulnerability can allow attackers to disclose sensitive information, using a specially created application...
Updated xen packages fix security vulnerability
- Updated from 4.12.0 to 4.12.1 - Device quarantine for alternate pci assignment methods XSA-306 - x86: Machine Check Error on Page Size Change DoS XSA-304, CVE-2018-12207 - TSX Asynchronous Abort speculative side channel XSA-305, CVE-2019-11135 - VCPUOPinitialise DoS XSA-296, CVE-2019-18420...
Unauthorized Access Vulnerability in Jeecg-Boot
JJeecg-Boot is a rapid development platform based on a code generator. Jeecg-Boot suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive system information...
Servicing stack update for Windows Server 2012, Windows 8.1 and Windows Server 2012 R2: July 9, 2019
Servicing stack update for Windows Server 2012, Windows 8.1 and Windows Server 2012 R2: July 9, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include: Addresses an issue with a Secure Boot feature upda...
Spring Boot Installed
Binary data pivotalsoftwarespringbootinstalled.nbin...
reblog
Defeating a Laptop's BIOS Password We found a laptop laying a...
Logic Flaw Vulnerability in JEECG-BOOT System of Beijing Guo Torch Information Technology Co.
Jeecg-Boot is a code generator based rapid development platform that can be used to develop backend management systems such as ERP, CRM and applets. A logic flaw exists in the JEECG-BOOT system of Beijing Guo Torch Information Technology Co., Ltd, which can be exploited by an attacker to modify t...
Authentication flaw
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology iRST Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settin...
PT-2020-2428 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.6 Description: The issue is related to a memory leak in the svm cpu uninit function in arch/x86/kvm/svm.c. This leak occurs once at boot time and is negligible in size. It cannot be triggered at will. Third...
Security update for Windows 10, version 1507, Windows 8.1, Server 2012 R2, and Server 2012: February 11, 2020
Security update for Windows 10, version 1507, Windows 8.1, Server 2012 R2, and Server 2012: February 11, 2020 This standalone security update has been removed due to an issue affecting a sub-set of devices. It will not be re-offered from Windows Update, Windows Server Update Services WSUS or...
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...
Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability
A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface UEFI Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to improp...
CVE-2020-5326
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology iRST Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settin...
Huawei P10 Plus Digital Balance Bypass Vulnerability
Huawei P10 Plus is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in Huawei smart phones P10 Plus. During a reset of the phone, an attacker could use the vulnerability to bypass the boot wizard and turn on a business switch, thereby bypassing the Healthy Use of...
CVE-2020-9024
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl executed as root by crond and /root/loadperl.sh executed as root at boot time scripts...
CVE-2020-9024
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl executed as root by crond and /root/loadperl.sh executed as root at boot time scripts...
Microsoft Windows Secure Boot Security Feature Bypass Vulnerability (CNVD-2020-16651)
Microsoft Windows is a popular operating system. A security feature bypass vulnerability exists in Microsoft Windows Secure Boot, which allows remote attackers to exploit the vulnerability to submit a special application request that can bypass Secure Boot and load untrusted software...
Microsoft Windows Secure Boot Security Feature Bypass Vulnerability (KB4502496)
This host is missing an important security update according to Microsoft KB4502496 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
