2572 matches found
CVE-2021-33081
Affects: Intel SSD DC Products firmware. Issue: protection mechanism failure in the firmware may allow a local, privileged user to cause information disclosure. Impact: based on the CVE entry, confidentiality is at risk, with local attack prerequisites and high privilege requirements; details in ...
CVE-2021-33076
CVE-2021-33076 describes an improper authentication flaw in firmware for some Intel SSD DC products that could allow an unauthenticated user to escalate privileges via physical access. Affected component: firmware of Intel SSD DC products; root cause: improper authentication mechanism in firmware...
CVE-2021-33079: Protection Mechanism Failure
Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...
CVE-2021-33081: Protection Mechanism Failure
Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...
Intel(R) SSD DC 授权问题漏洞
IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products that stems from improper authentication in its firmware that could allow an unauthenticated user to potentially escalate privileges through physical access...
CVE-2021-33076: Improper Authentication
Improper authentication in firmware for some IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
MAL-2022-2366 Malicious code in dc-main (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dceb4a54732ea88a32914ede9a5ffd5c61c8593fa9ac72465d3f691b8e8f96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2367 Malicious code in dc-test-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0f813c9a00e7fa7804deeffffa87ae75cfebcc7a9135b5d2bdc51ff38a473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dc-test-jq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0f813c9a00e7fa7804deeffffa87ae75cfebcc7a9135b5d2bdc51ff38a473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dc-main (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dceb4a54732ea88a32914ede9a5ffd5c61c8593fa9ac72465d3f691b8e8f96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
Design/Logic Flaw
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336: Incorrect Default Permissions
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
Samba AD DC CVE-2022-0336: SPN checks can be bypassed when re-adding a previously present SPN, enabling a write-enabled attacker to impersonate services or cause DoS by matching an existing SPN. Some advisories note no patch for certain releases (e.g., Samba 4.12.5-7), while others indicate an up...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-32746
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
CVE-2022-32746: Use After Free
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...