CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

Authorization

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

UBUNTU-CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

CVE-2021-40327

Affected software: Trusted Firmware-M (TF-M) 1.4.0, specifically when using Profile Small. Vulnerability: Incorrect access control allows NSPE to access a secure key held by the Crypto service based solely on knowledge of the key ID; there is no authorization check governing the relationship betw...

CVE-2021-40327: Missing Authorization

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...

PT-2022-11215

Name of the Vulnerable Software and Affected Versions Trusted Firmware-M TF-M version 1.4.0 Description The issue is related to incorrect access control in Trusted Firmware-M TF-M when Profile Small is used. Specifically, the Non-Secure Processing Environment NSPE can access a secure key held by...

PT-2021-27055

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description A memory leak issue was discovered in the error branch of the m can read fifo function. This issue was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.8. The actual impa...

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products Under Evaluation VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Proxy VMware vRealize Automation VMware...

PT-2021-10762

Name of the Vulnerable Software and Affected Versions 74CMS version 6.0.4 Description A cross-site scripting XSS issue was found in 74CMS. The issue is related to the /index.php?m=&c=help&a=help list&key endpoint. This allows for potential XSS attacks. Recommendations For 74CMS version 6.0.4, as ...

CVE-2020-22421: Improper Neutralization of Input During Web Page Generation

74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...

Unspecified Vulnerability in M-Files Web

M-Files Corporation M-Files Web is an intelligent information management platform from M-Files Corporation, USA. It is used to optimally support users in their daily work. A security vulnerability exists in M-Files Web that originates from M-Files Web allowing denial of service via overlapping...

Trusted Firmware M安全漏洞

ARM Trusted Firmware M TFM is an open source software from ARM UK. Provides a set of highly configurable software components to create a trusted execution environment. A security vulnerability exists in Trusted Firmware OP-TEE Trusted OS prior to version 3.15.0, which stems from the lack of secur...

CVE-2021-37253

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application...

CVE-2021-37253

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application...

CVE-2021-37253

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application...

Design/Logic Flaw

DISPUTED M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web...