Design/Logic Flaw

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 with Fingerprint support software. The check of an application's signature can be bypassed during installation. The Samsung ID is SVE-2016-5923 June 2016...

CVE-2019-20586

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...

CVE-2019-20586

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...

Type confusion

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...

CVE-2019-20586

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 August 2019...

CVE-2019-20586

CVE-2019-20586 affects Samsung mobile devices running O(8.1) and P(9.0) with TEEGRIS. Root cause is a type confusion in the FINGERPRINT Trustlet, enabling arbitrary code execution. Exploitation details are not provided in the available documents, and no public patch/version fix is specified; one ...

PT-2020-10564 · Samsung · Teegris +1

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software Description: The issue is related to type confusion in the FINGERPRINT Trustlet, which can lead to arbitrary code execution. Recommendations: For Samsung mobile devices with O8.1...

Lock and Code S1Ep2: On the challenges of managed service providers

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to two representatives from an Atlanta-based managed service provider—a manager of engineering services and a data center architect—about the daily challeng...

Intel SGX and Processor Side Channel Data Leakage Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-30553 Potential Impact: Information disclosure, escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0551, CVE-2020-0561 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that m...

Google Android FPC Fingerprint TEE Component Buffer Overflow Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. The FPC Fingerprint TEE is one of the fingerprint recognition components. A security vulnerability exists in the FPC Fingerprint TEE component of Android. The vulnerability can be...

Google Android FPC Fingerprint TEE Component Buffer Overflow Vulnerability (NVD-C-2020-41310)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. The FPC Fingerprint TEE is one of the fingerprint recognition components. A security vulnerability exists in the FPC Fingerprint TEE component of Android. The vulnerability can be...

CVE-2020-1942

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was...

CVE-2020-1942

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was...

Design/Logic Flaw

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was...

CVE-2020-1942

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was...

[SECURITY] [DLA 2087-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u5 CVE ID : CVE-2019-18625 CVE-2019-18792 Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata. CVE-2019-18625 It was possible to bypass/evade any tcp based signature by faking a...

Microsoft OneDrive App for Android Security Bypass Vulnerability

Microsoft OneDrive app is an office cloud drive software. A security vulnerability exists in Microsoft OneDrive App for Android. An attacker can exploit the vulnerability to bypass password or fingerprint authentication...

Microsoft OneDrive for Android Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android. This could allow an attacker to bypass the passcode or fingerprint requirements of the App. The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharin...

Linux: SSH LogLevel

INFO level is the basic level that only records login activity of SSH users. In many situations, such as Incident Response, it is important to determine when a particular user was active on a system. The logout record can eliminate those users who disconnected, which helps narrow the field. VERBO...

Samsung J6 Access Control Error Vulnerability

The Samsung J6 is a smartphone from the South Korean company Samsung Samsung. The com.samsung.android.themecenter app in the Samsung J6 build fingerprint: samsung/j6ltexx/j6lte:8.0.0/R16NW/J600FNXXU3ASC1: user/release-keys An access control error vulnerability exists. The vulnerability stems from...