Deploying EFBs securely

It may come as a surprise to some to discover that electronic flight bag security at airlines is often quite variable. Whilst some use an MDM, a lot don’t. Of those who do, PINs are often weak. Some airlines actively encourage pilots to use their devices for personal use. We’ve heard stories of a...

OracleVM 3.4 : xen (OVMSA-2021-0014)

"The remote OracleVM system is missing necessary patches to address security updates: - An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

Information disclosure

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

CVE-2019-4722

Summary of CVE-2019-4722 (IBM Cognos Analytics): IBM Cognos Analytics 11.0 and 11.1 contain an information-disclosure vulnerability that allows a remote attacker to obtain sensitive information via a stack trace, caused by mishandling certain error conditions. Public sources in the connected data...

Cisco StarOS DoS (cisco-sa-StarOS-DoS-RLLvGFJj)

According to its self-reported version, the SSH service of the Cisco StarOS operating system is affected by denial of service vulnerability due to a logic error that may occur under specific traffic conditions. An unauthenticated, remote attacker could exploit this by sending a series of crafted...

CVE-2021-22742

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position...

CVE-2021-22744

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique...

CVE-2021-22746

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique...

CVE-2021-22742

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position...

CVE-2021-22744

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique...

CVE-2021-22742

The CVE pertains to Triconex Model 3009 MP on Tricon V11.3.x systems, where an improper check for unusual or exceptional conditions allows a module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. The Red Hat entries confirm this C...

Triconex Model 3009 MP 代码问题漏洞

Schneider Electric Triconex TriStation is a process safety management software from Schneider Electric, France. A security vulnerability exists in Triconex Model 3009 MP, which arises from improperly checking for anomalies or abnormal conditions...

Triconex Model 3009 MP 代码问题漏洞

The Swan Electric Triconex Model 3009 MP is a system controller from Swan Electric. A security vulnerability exists in the Triconex Model 3009 MP that arises from improper checking of abnormal or unusual conditions...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a race conditions during an update of the local and shared status which allows an attacker to crash the application via malicious input...

Bouncy Castle BC 竞争条件问题漏洞

Bouncy Castle BC is a cryptographic library for C and Java applications from the Bouncy Castle organization. Bouncy Castle BC suffers from a Competitive Conditions Issue vulnerability that can be exploited by an attacker to bypass access restrictions on data in order to obtain sensitive informati...

[SECURITY] [DLA 2661-1] jetty9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2661-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 14, 2021 https://wiki.debian.org/LTS -...

Google Chrome Competitive Conditions Issue Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome version 90.0.4430.212 previously had a competitive conditions issue vulnerability. The vulnerability stems from a competitive conditions security issue found in the Aura component of the program. No detailed...

The vulnerability of the implementation of the huft_free() function in the UNIX utility commands of BusyBox allows a hacker to cause a service failure.

The vulnerability of the implementation of the huftfree function in the UNIX command-line utility BusyBox is related to deficiencies in handling exceptional conditions in the huftbuild result pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure using the...