Microsoft Guidance for Lazy FP State Restore

Executive summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On June 13...

Intel Releases Security Advisory on Lazy FP State Restore Vulnerability

Intel has released recommendations to address a vulnerability—dubbed Lazy FP state restore—affecting Intel Core-based microprocessors. An attacker could exploit this vulnerability to obtain access to sensitive information. NCCIC encourages users and administrators to review Intel's Security...

Lazy FP State Restore

Summary: System software may utilize the Lazy FP state restore technique to delay the restoring of state until an instruction operating on that state is actually executed by the new process. Systems using Intel® Core-based microprocessors may potentially allow a local process to infer data...

KLA11291 Microsoft Guidance for Lazy Floating Point State Restore

Speculative store bypass vulnerability in Microsoft Windows systems can be exploited to bypass security restrictions. On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving...

How to do an Application Item Restore using Standalone Veeam Agent Backups in a Cloud Connect Repository

Article Applicability This article documents a method for performing Application Item Restore from restore points created by a Standalone Veeam Agent for Microsoft Windows deployment and stored in a Cloud Connect Repository. For Veeam Agent for Microsoft Windows deployments managed by a tenant's...

CVE-2018-9246

The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create, runfile, backup, or restore function. The vulnerability...

PT-2018-18928

Name of the Vulnerable Software and Affected Versions PGObject::Util::DBAdmin module versions prior to 0.120.0 LedgerSMB versions 1.5.x and earlier Description The issue arises from insufficient sanitization or escaping of variable values used in shell command execution. This results in shell cod...

CVE-2018-9246: Improper Encoding or Escaping of Output

The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create, runfile, backup, or restore function. The vulnerability...

CVE-2018-7976

There is a stored cross-site scripting XSS vulnerability in Huawei eSpace Desktop V300R001C00 and V300R001C50 version. Due to the insufficient validation of the input, an authenticated, remote attacker could exploit this vulnerability to send abnormal messages to the system and perform a XSS...

Command injection

Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function...

CVE-2018-11220

Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function...

CVE-2018-11220

CVE-2018-11220 affects Bitmain Antminer D3, L3+, and S9 devices. The vulnerability enables remote command execution through the device’s system restore/recovery functionality, allowing an attacker with or without authentication (depending on context) to trigger arbitrary commands on the device. C...

PT-2018-10404

Name of the Vulnerable Software and Affected Versions Bitmain Antminer devices affected versions not specified Description The issue allows for remote command execution via the system restore function. Recommendations At the moment, there is no information about a newer version that contains a fi...

CVE-2018-11220: Undefined Security Weakness

Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function...

Moodle 2.x / 3.x Multiple Vulnerabilities (May 2016) - Linux

Moodle CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

How to Move Veeam Backup for Microsoft 365 to a New Server

Purpose This article documents the procedure for moving resources assigned to a Veeam Backup for Microsoft 365 server installation to a new Veeam Backup for Microsoft 365 server. At this time, there is no way to export the configuration of Veeam Backup for Microsoft 365. As such,all organizations...

UBUNTU-CVE-2016-10721

partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to execute arbitrary code in the context of the user running the affected application...

Protecting the Veeam Backup & Replication server

Purpose This article provides information about protecting the Veeam Backup & Replication Configuration. This addresses the frequently asked question: "How do I back up or protect the Veeam Server?" The only supported way to protect the configuration of Veeam Backup & Replication is to use the...

Microsoft Windows 10: Restore files and directories

This security setting determines which users can bypass file, directory, registry, and other persistent object permissions when they restore backed up files and directories, and it determines which users can set valid security principals as the owner of an object. OpenVAS Vulnerability Test $Id:...

Microsoft Windows 10: Access Credential Manager as a trusted caller

The Access Credential Manager as a trusted caller policy setting is used by Credential Manager during backup and restore. No accounts should have this privilege because it is assigned only to the Winlogon service. Saved credentials of users may be compromised if this privilege is given to other...