UVI-2021-1001128 s390/stack: fix possible register corruption with stack switch helper

s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...

GSD-2021-1001128 s390/stack: fix possible register corruption with stack switch helper

s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...

PT-2021-25607

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.20 through v5.12.13 Description: The issue is related to possible register corruption with a stack switch helper. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-25599

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.20 through 5.10.46 Description: The issue concerns a possible register corruption with the stack switch helper. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-29593

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.10.46 Description The issue is related to possible register corruption with a stack switch helper. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-29610

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.12 Description The issue is related to possible register corruption with stack switch helper. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4....

PT-2021-29601

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.12.13 Description The issue concerns a possible register corruption with the stack switch helper. It was introduced in version 4.20 and fixed in version 5.12.14. The actual impact and attack plausibility ha...

PT-2021-25616

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.20 through 5.12 Description: The issue is related to possible register corruption with a stack switch helper. It was introduced in version v4.20 and fixed in version v5.13. The actual impact and attack plausibility hav...

Backdoor.Win32.Zombam.l Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9729e9fc004ea49d3c2ddee28736dae3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.l Vulnerability: Remote Stack Buffer Overflow Description: Zombam malware...

CVE-2021-32639

Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery SSRF. In particular, the RegisterPeerAction endpoint and the AddChildDirectoryAction endpoint are vulnerable to SSRF. This vulnerability may lead to credential leaks. Emissary...

PT-2021-25444

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue concerns illegal APIC register access in the LAPIC component of the KVM. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been prove...

PT-2021-29515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue concerns illegal APIC register access in the LAPIC component of the KVM. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-25384

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been...

PT-2021-25521

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been...

PT-2021-29438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been prove...

ALPINE-CVE-2021-28690

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX the default and preferred option requires selecting a...

CVE-2021-28690

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX the default and preferred option requires selecting a...

UBUNTU-CVE-2021-28690

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX the default and preferred option requires selecting a...

bem-register (>=1.0.0, <=1.0.5), itstep_server (0.0.1) +5 more potentially affected by CVE-2021-21422 via mongo-express (>=0.19.0, <=1.0.0-alpha.1)

mongo-express NPM version =0.19.0, =1.0.0, =0.1.1, =1.0.0, =4.6.12, =1.5.0, =1.6.1 Source cves: CVE-2021-21422 Source advisory: MEND:CVE-2021-21422...