1340 matches found
Siemens Sicam Protection Mechanism Failure
A vulnerability has been identified in SICAM A8000 CP-8000 All versions V16, SICAM A8000 CP-8021 All versions V16, SICAM A8000 CP-8022 All versions V16. A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position...
Cross-Site Request Forgery (CSRF) in zhongshaofa/easyadmin
✍️ Description Attacker able to delete any menu with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your application. In CSRF attacks it...
FortiPortal - Path traversal in controller
A protection mechanism failure vulnerability CWE-693 resulting in improperly limiting pathname to a restricted directory in FortiPortal may allow an authenticated attacker to perform a path traversal attack via maliciously crafted GET parameters...
CVE-2021-34556
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack...
EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2021-2157)
According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment...
Advisory ROSA-SA-2021-1836
Software: freeradius 3.0.13 OS: Cobalt 7.9 CVE-ID: CVE-2019-11234 CVE-Crit: CRITICAL CVE-DESC: FreeRADIUS before 3.0.19 does not prevent the use of reflection for authentication spoofing, also known as the "Dragonblood" issue, similar to CVE-2019-9497. CVE-STATUS: default CVE-REV: Default CVE-ID:...
The vulnerability of the sshd service in the OpenSSH encryption protection mechanism allows a hacker to induce a service failure.
The vulnerability of the sshd service in the OpenSSH encryption protection mechanism is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2020-24515
Protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Session fixation
Protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...
Session fixation
Protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2020-24515
CVE-2020-24515 affects Intel RealSense ID (F450/F455). Root cause: protection mechanism failure in some RealSense IDs enabling privilege escalation by an unauthenticated user with physical access. Impact: escalation of privileges; attacker requires physical access; CVSSv3.1 vector AV:P/AC:H/PR:N/...
CVE-2020-24515
Protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Intel RealSense IDs 安全漏洞
Intel RealSense IDs is a real-sense technology from Intel Corporation USA. The most comprehensive computer vision hardware and software solution for making your products understand the 3D world. A security vulnerability exists in IntelR RealSenseTM IDs that stems from a protection mechanism failu...
Intel Thunderbolt controller 安全漏洞
The Intel Thunderbolt controller is a connector standard published by Intel, a U.S.-based company that supports both copper and fiber-optic media and is intended to be used as a common bus between computers and other devices. A security vulnerability exists in the IntelR ThunderboltTM controller,...
CVE-2021-33881
On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...
CVE-2021-29956
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...
CVE-2021-20565
IBM Cloud Pak for Security CP4S 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236...
Input validation
IBM Cloud Pak for Security CP4S 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236...
CVE-2021-20565
IBM Cloud Pak for Security CP4S 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236...