USN-5417-1 linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi vulnerabilities

Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre Variant 2 mitigations for AMD processors on Linux were insufficient in some situations. A local attacker could possibly use this to expose sensitive...

IDEC PLC 安全漏洞

The IDEC PLC is a programmable controller. A security vulnerability exists in the IDEC PLC that could allow an attacker to obtain PLC web server user credentials from a file server, backup repository, or a ZLD file saved on an SD card. The following products and versions are affected: FC6A Series...

CVE-2021-3615

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code execution if a specific file exists on the attached SD card. This vulnerability is the same as CNVD-2021-45262...

USN-4467-2 qemu vulnerabilities

USN-4467-1 fixed several vulnerabilities in QEMU. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that the QEMU SD memory card implementation incorrectly handled certain memory operations. An attacker inside a guest could possibly u...

Qualcomm Automotive Telematics Security Breach

Qualcomm Automotive Telematics is a support firmware for automotive telematics from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Automotive Telematics where a newly created buffer is read again from mmc without validation. mdm9630, mdm9640, mdm9650, mdm9655, msm8909w,...

Debian DLA-2373-1 : qemu security update

The following security issues have been found in qemu, which could potentially result in DoS and execution of arbitrary code. CVE-2020-1711 An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU handled a response coming from an iSCSI server while checking th...

[SECURITY] [DLA 2373-1] qemu security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2373-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 13, 2020 https://wiki.debian.org/LTS -...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4467-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4467-1 advisory. Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP ec...

CVE-2020-13253

An out-of-bounds read-access flaw was found in the SD Memory Card emulator of the QEMU. This flaw occurs while performing block write commands via sdhciwrite, if a guest user has sent an 'address' which is out-of-bounds of 's-wpgroups'. A guest user or process may use this flaw to crash the QEMU...

Huawei Emily-L29C Information Disclosure Vulnerability

The Huawei Emily-L29C is a smartphone from the Chinese company Huawei. An information disclosure vulnerability exists in the Huawei Emily-L29C. The vulnerability arises from a configuration or other error in the operation of a network system or product. An attacker can exploit this vulnerability ...

Yokogawa F3SP Memory Card Detection

Binary data 758268.prm...

Hitachi EH-MEMP Memory Card Detection

Binary data 757698.prm...

Hitachi EH-MEMD Memory Card Detection

Binary data 757699.prm...

Yokogawa F3BP Memory Card Detection

Binary data 758269.prm...

Siemens CPU-1511C-1 PN PLC Detection

Binary data 750168.prm...

Yokogawa F3BP Memory Card Detection

Binary data 758267.prm...

Yokogawa F3SP Memory Card Detection

Binary data 758270.prm...

Mitsubishi QD81DL96 Communications Adapter Detection

Binary data 752144.prm...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - CSRF (Add Admin) Vulnerability

Exploit for hardware platform in category web applications BEWARD N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Exploit Vendor: Beward R&D Co., Ltd Product web page: https://www.beward.net Affected version: M2.1.6.04C014 Summary: The N100 compact color IP camera with support for a more efficient...

Orbic Wonder Information Disclosure Vulnerability

Orbic Wonder is a smartphone product from Orbic USA. An information disclosure vulnerability exists in Orbic Wonder's Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys. An attacker can exploit the vulnerability to read a copy of the Android logs on an SD card to obtain sensitive...