934 matches found
CVE-2013-3621
CVE-2013-3621 is a reserved/duplicate of CVE-2013-3607, but connected documents discuss Supermicro IPMI CGI vulnerabilities: unauthenticated buffer‑overflow flaws in the login.cgi/close_window.cgi components on Supermicro IPMI firmware CGI, enabling remote code execution on affected BMCs. Documen...
RUSTSEC-2019-0029 ChaCha20 counter overflow can expose repetitions in the keystream
The ChaCha20 stream cipher can produce a maximum of 2^32 blocks 256GB before the 32-bit counter overflows. Releases of the chacha20 crate prior to v0.2.3 allow generating keystreams larger than this, including seeking past the limit. When this occurs, the keystream is duplicated, with failure mod...
ChaCha20 counter overflow can expose repetitions in the keystream
The ChaCha20 stream cipher can produce a maximum of 2^32 blocks 256GB before the 32-bit counter overflows. Releases of the chacha20 crate prior to v0.2.3 allow generating keystreams larger than this, including seeking past the limit. When this occurs, the keystream is duplicated, with failure mod...
CVE-2008-6176
No description is available for this CVE...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
Design/Logic Flaw
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10840
CVE-2016-10840 affects cPanel prior to 11.54.0.4. The issue allows arbitrary code execution during locale duplication (SEC-72). Affected product: cPanel (control panel software). The vulnerability is evidenced in multiple sources, including NVD and Red Hat’s CVE listing, indicating an in-product ...
CVE-2019-12615
An issue was discovered in getvdevportnodeinfo in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdupconst of nodeinfo-vdevport.name, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash...
CVE-2019-5428
CVE-2019-5428 is rejected/not used and does not represent an active vulnerability entry; refer to CVE-2019-11358.
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Securi...
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation
Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The LUAFV driver doesn’t take into account a virtualized handle bei...
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Exploit
Exploit for windows platform in category local exploits Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The LUAFV...
CVE-2019-1000047
CVE-2019-1000047 is a reservation/duplicate of CVE-2013-7469. Connected documents describe the underlying issue as Seafile (through 6.2.11) using the same Initialization Vector in CBC mode to encrypt private data, enabling easier chosen-plaintext/dictionary attacks. There is no independent detail...
Friday Squid Blogging: The Hawaiian Bobtail Squid Genome
The Hawaiian Bobtail Squid's genome is half again the size of a human's. Other facts: The Hawaiian bobtail squid has two different symbiotic organs, and researchers were able to show that each of these took different paths in their evolution. This particular species of squid has a light organ tha...
Fedora 28 : polkit (2019-b1da89df11)
Due to kernel issue there is a way to reuse starttime of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue 75 slowfork: https://gitlab.freedesktop.org/polkit/polkit/issues/75 Note that Tenable Network Security has extracted the preceding...
Polylang <= 2.5 - CSRF in categories and media duplication
The Polylang WordPress plugin was affected by a CSRF in categories and media duplication security vulnerability...
Fedora 29 : polkit (2019-e957cecffd)
Due to kernel issue there is a way to reuse starttime of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue 75 slowfork: https://gitlab.freedesktop.org/polkit/polkit/issues/75 Note that Tenable Network Security has extracted the preceding...
