Microsoft Azure SDK Security Vulnerability

Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Microsoft Azure SDK. The following products and versions are affected:Azure SDK for Java...

Microsoft Azure SDK Security Vulnerability

Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Azure SDK for C. There is no information about this vulnerability at this time, so please stay tuned to CNNVD or vendor announcements. The...

Vulnerabilities fixed in Microsoft Azure

Vulnerabilities have been fixed in Azure. The vulnerabilities allow a malicious person to bypass security measures. Azure Sphere: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |. |----------------|------|-------------------------------------| |...

Payment Card Skimmer Group Using Raccoon Info-Stealer to Siphon Off Data

A cybercrime group known for targeting e-commerce websites unleashed a "multi-stage malicious campaign" earlier this year designed with an intent to distribute information stealers and JavaScript-based payment skimmers. In a new report published today and shared with The Hacker News,...

Moddable SDK OS Code Issue Vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in versions of Moddable SDK prior to OS200908, which results in a denial of service SEGV due to xObjectBindingFromExpression at...

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory, allowing an attacker to exploit their privileges.

The vulnerability of the built-in software in the Intel NUC Kit relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the built-in software in Intel NUC Kits is related to improper handling of resolutions, allowing attackers to increase their privileges.

The vulnerability in the built-in software of the Intel NUC Kit is related to incorrect handling of resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability in the built-in software of the Intel NUC Kit relates to incorrect resource initialization, allowing attackers to exploit their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PT-2020-5853 · P11 Kit +7 · P11-Kit +7

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.23.6 through 0.23.21 Description: A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array i...

DEBIAN-CVE-2019-14563

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

IoT security: how Microsoft protects Azure Datacenters

Azure Sphere first entered the IoT Security market in 2018 with a clear mission—to empower every organization on the planet to connect and create secure and trustworthy IoT devices. Security is the foundation for durable innovation and business resilience. Every industry investing in IoT must...

DEBIAN-CVE-2019-14559

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

UBUNTU-CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2020-66301)

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. IntelR NUCs suffers from a buffer overflow vulnerability that stems from an improper buffer restriction could allow a privileged user to potentially enable privileged escalation via local access. No detailed vulnerability...

CVE-2020-12354

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Command execution vulnerability exists in MyuCMS (CNVD-2020-67559)

MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. A command execution vulnerability exists in MyuCMS, which can be exploited to gain server privileges...

Command execution vulnerability exists in MyuCMS (CNVD-2020-67557)

MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. MyuCMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472, a Windows Kerberos authentication...

dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS

A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOSTUSERGETINFLIGHTFD messages, causing a resource leak file descriptors and virtual memory, which may result in a denial of service...

Important: dpdk security, bug fix, and enhancement update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. The following packages have been upgraded to a later upstream version: dpdk 19.11.3. BZ1824905 Security Fixes: dpdk: librtevhost Malicious guest could...