1685 matches found
Observable Response Discrepancy in Lost Password Service
Impact It is possible to enumerate usernames via the forgot password functionality Patches Update to version 10.1.3 or apply this patch manually: https://github.com/pimcore/pimcore/pull/10223.patch Workarounds Apply https://github.com/pimcore/pimcore/pull/10223.patch manually...
CVE-2021-34576
In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information water consumption without distinct values to third parties...
Information disclosure
In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information water consumption without distinct values to third parties...
CVE-2021-34576: Observable Discrepancy
In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information water consumption without distinct values to third parties...
PT-2021-20558
Name of the Vulnerable Software and Affected Versions: Kaden PICOFLUX Air affected versions not specified Description: The issue concerns an information exposure through observable discrepancy. This discrepancy may provide sensitive information, such as water consumption without distinct values, ...
CVE-2021-39189 Observable Response Discrepancy in Lost Password Service
Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually...
RHEL 7 : microcode_ctl (RHSA-2021:3323)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3323 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache...
Exploit for Observable Discrepancy in Servicenow
CVE-2021-45901 ServiceNow - Username Enumeration !service-...
RHEL 7 : microcode_ctl (RHSA-2021:3322)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3322 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache...
CVE-2021-34576
In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information water consumption without distinct values to third parties...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Incorrect implementation of the Streebog hash functions in streebog
Internal update-sigma function was implemented incorrectly and depending on debug-assertions it could've caused an incorrect result or panic for certain inputs...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
RHEL 7 : microcode_ctl (RHSA-2021:3255)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3255 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Important: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
RHEL 8 : microcode_ctl (RHSA-2021:3176)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3176 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache...