CVE-2020-8766

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-0588

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Visualize Visitor Prioritization in Real Time with mPulse

COVID-19 is changing our behavior as we try to avoid person-to-person contact. For example, according to the Google Mobility Report, September 2020 shows an average 23% drop in retail and recreation activity and a 22% drop in workplace traffic in Tokyo compared to a baseline average before COVID-...

SUSE-SU-2020:3051-1 Security update for xen

This update for xen fixes the following issues: - bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 - bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 - bsc1177413 - VUL-0: CVE-2020-27671: xen: undue...

LSN-0072-1: Kernel Live Patch Security Notice

It was discovered that the F2FS file system implementation in the Linux kernel did not properly perform bounds checking on xattrs in some situations. A local attacker could possibly use this to expose sensitive information kernel memory. CVE-2020-0067 It was discovered that the Serial CAN interfa...

LSN-0072-1 Kernel Live Patch Security Notice

It was discovered that the F2FS file system implementation in the Linux kernel did not properly perform bounds checking on xattrs in some situations. A local attacker could possibly use this to expose sensitive information kernel memory. CVE-2020-0067 It was discovered that the Serial CAN interfa...

CVE-2020-26599

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

CVE-2020-26599

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

CVE-2020-26599

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

openSUSE Security Update : xen (openSUSE-2020-1608)

This update for xen fixes the following issues : - CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 - CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 - CVE-2020-25604: Fix...

RHEL 7 : kernel-rt (RHSA-2020:4062)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4062 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Denial Of Service (DoS)

xen is vulnerable to denial of service. Race conditions in evtchnreset and uses of EVTCHNOPreset or XENDOMCTLsoftreset can lead to the violation of various internal assumptions, resulting in out of bounds memory accesses...

CVE-2020-25599

An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset by itself covered by XSA-77 can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses ...

CVE-2020-25599

An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset by itself covered by XSA-77 can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses ...

CVE-2020-25599

CVE-2020-25599 affects Xen up to 4.14.x, with race conditions in evtchn_reset() potentially allowing x86 PV guests to escalate to host privileges, cause host/guest crashes, or DoS. All Xen 4.5+ are vulnerable; 4.4 and earlier are not. Several vendor advisories indicate patches were released to fi...

CVE-2020-25599

An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset by itself covered by XSA-77 can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses ...

CVE-2020-25599

An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset by itself covered by XSA-77 can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses ...

DEBIAN-CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

PT-2020-13445 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1.10 GitLab versions prior to 13.2.8 GitLab versions prior to 13.3.4 Description: A vulnerability was discovered where the same 2-factor Authentication secret code was generated, allowing an attacker to maintain...

Intel BIOS Advisory

Summary: Potential security vulnerabilities in BIOS firmware for multiple Intel Platforms may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24457...