Lucene search
+L

222 matches found

OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•18 views

SUSE: Security Advisory (SUSE-SU-2018:2409-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS7.2AI score0.08573EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2018:2401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS7.2AI score0.08573EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•66 views

SUSE: Security Advisory (SUSE-SU-2018:2410-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS7.2AI score0.08573EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•69 views

SUSE: Security Advisory (SUSE-SU-2018:2410-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS7.2AI score0.08573EPSS
SaveExploits0References6
Prion
Prion
•added 2020/06/30 5:15 p.m.•17 views

Design/Logic Flaw

In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and password. In versions prior to 2.10.0...

2.1CVSS6AI score0.00577EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2020/06/23 3:37 p.m.•10 views

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

5.5CVSS6.5AI score0.00564EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2020/06/23 1:48 p.m.•11 views

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

5.5CVSS6.5AI score0.00564EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2020/06/15 4:08 p.m.•102 views

Critical: Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 12 security update

This is a security update for JBoss EAP Continuous Delivery 12.0. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS7.1AI score0.91896EPSS
SaveExploits12References6
RedHat Linux
RedHat Linux
•added 2020/06/15 4:08 p.m.•13 views

infinispan: Unsafe deserialization of malicious object injected into data cache

It was found that the Hotrod client in Infinispan would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks...

8.8CVSS5.8AI score0.02827EPSS
SaveExploits0References4
Ubuntu
Ubuntu
•added 2020/06/09 6:42 p.m.•95 views

USN-4385-1: Intel Microcode vulnerabilities

It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use th...

5.5CVSS6.7AI score0.00564EPSS
SaveExploits0References1
Hewlett-Packard
Hewlett-Packard
•added 2020/06/09 12:00 a.m.•72 views

HPSBHF03670 rev. 2 - Intel® Processors Data Leakage Advisory

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability involving cleanup errors in some data cache evictions in some Intel® Processors that may allow a...

5.5CVSS2.2AI score0.00564EPSS
SaveExploits0
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•66 views

Unspecified Vulnerability in Multiple Intel Products (CNVD-2021-27996)

Intel Core Processors is an Intel Core family of central processing units CPUs from the American company Intel. A security vulnerability exists in a number of Intel products, which arises from a program that does not properly perform data forwarding in the data cache and can be exploited by a loc...

5.6CVSS6.4AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/12 10:15 p.m.•38 views

CVE-2020-0550

Improper data forwarding in some data cache for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330:...

5.6CVSS5.1AI score0.00333EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/12 9:02 p.m.•159 views

CVE-2020-0550

CVE-2020-0550 affects some Intel processors as described in Intel Advisory intel-sa-00330. The issue is improper data forwarding in certain data caches that may allow an authenticated local user to disclose information. The CVSS3.1 vector (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) yields a base score ...

5.6CVSS5AI score0.00333EPSS
SaveExploits0References2Affected Software752
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•3 views

CVE-2020-0550: Undefined Security Weakness

Improper data forwarding in some data cache for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330:...

5.6CVSS6AI score0.00333EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2020/03/10 5:00 p.m.•30 views

CVE-2020-0550

Improper data forwarding in some data cache for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330:...

5.6CVSS6.1AI score0.00333EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/03/10 12:00 a.m.•6 views

PT-2020-4012 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper data forwarding in some data cache for IntelR Processors, which may allow an authenticated user to potentially enable information disclosure via...

5.6CVSS4.9AI score0.00333EPSS
SaveExploits0References12
OSV
OSV
•added 2020/01/28 1:15 a.m.•14 views

CVE-2020-0549

Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.6AI score
SaveExploits0References9
NVD
NVD
•added 2020/01/28 1:15 a.m.•24 views

CVE-2020-0549

Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.7AI score0.00564EPSS
SaveExploits0References9
Prion
Prion
•added 2020/01/28 1:15 a.m.•30 views

Information disclosure

Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.4AI score0.00564EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder