Threatspec - Continuous Threat Modeling, Through Code

Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write threat modeling annotations as comments inside source...

CVE-2021-27582

org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment aka Autobinding vulnerability. This arises due to unsafe usage of the @ModelAttribute annotation during the OAuth authorization flow, in...

CVE-2021-27582

MITREid Connect OpenID Connect server (MITREid Connect) before 1.3.3 is affected by a Mass Assignment (Autobinding) vulnerability in OAuthConfirmationController.java. The issue arises from unsafe usage of the @ModelAttribute annotation during the OAuth authorization flow, allowing HTTP request pa...

PT-2021-17521 · Mitre · Mitreid Connect

Name of the Vulnerable Software and Affected Versions: MITREid Connect versions through 1.3.3 Description: The OpenID Connect server implementation for MITREid Connect contains a Mass Assignment vulnerability, also known as Autobinding. This issue arises due to the unsafe usage of the...

MITREid Connect Security Breach

Michael Stepankin OpenID-Connect-Java-Spring-Server is a GlobalMichael Stepankin open source application that provides the OpenID Connect identity provider and a generic OAuth 2.0 authorization server. A security vulnerability exists in MITREid Connect through 1.3.3, which stems from the insecure...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0544 Description:...

Intel® Graphics Drivers Multi-Generation Processor Privilege Escalation Vulnerability

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® Graphics Drivers Multi-Generation Processor Privilege Escalation Vulnerability, Inadequate control flow management in some IntelR kernel-mode drivers for graphics...

Code injection

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +6 more potentially affected by CVE-2021-26559 via apache-airflow (>=1.8.2 <=2.0.0rc3)

apache-airflow PYPI version =1.8.2, =0.1.0rc3, =0.1.0, =2.4.2, =1.7.2, =0.0.5, =0.0.6 Source cves: CVE-2021-26559 Source advisory: OSV:PYSEC-2021-2...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +6 more potentially affected by CVE-2021-26697 via apache-airflow (>=1.8.2 <=2.0.0rc3)

apache-airflow PYPI version =1.8.2, =0.1.0rc3, =0.1.0, =2.4.2, =1.7.2, =0.0.5, =0.0.6 Source cves: CVE-2021-26697 Source advisory: OSV:PYSEC-2021-3...

CVE-2020-12339

Insufficient control flow management in the API for the IntelR Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2020-0521

Insufficient control flow management in some IntelR Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0544

Insufficient control flow management in the kernel mode driver for some IntelR Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0521

Insufficient control flow management in some IntelR Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in some IntelR Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12339

The vulnerability CVE-2020-12339 affects Intel® Collaboration Suite for WebRTC before version 4.3.1, due to insufficient control flow management in the API. An authenticated user could potentially escalate privileges via network access, with there being no user interaction required (per CVSS 3.1)...

CVE-2020-12339

Insufficient control flow management in the API for the IntelR Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2020-0521

CVE-2020-0521 affects Intel graphics drivers where a deficiency in control-flow management in the graphics driver stack could allow an authenticated local attacker to escalate privileges. The Intel advisory (Intel-SA-00438) confirms the issue is in some Intel Graphics Drivers for Windows and Linu...

CVE-2020-0544

CVE-2020-0544 affects Intel® Graphics Drivers; root cause is insufficient control flow management in the kernel-mode driver. An authenticated, local attacker could potentially escalate privileges. Affected are some Intel graphics drivers prior to version 15.36.39.5145. Intel/Intel SA advisory rec...

CVE-2020-0544

Insufficient control flow management in the kernel mode driver for some IntelR Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...