PT-2021-17007

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to a failure to validate VM HSAVE PA during SNP INIT, which may result in a loss of memory integrity. Recommendations At the moment, there is no information about...

PT-2021-17005

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to the failure to validate SEV Commands while SNP is active, which may result in a potential impact to memory integrity...

PT-2021-17006

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description The issue is related to insufficient input validation in the SNP GUEST REQUEST command, which may lead to a potential data abort error and a denial of service. Recommendations At the moment...

CVE-2021-26323: Improper Input Validation

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...

PT-2021-17008

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to insufficient validation of guest context in the SNP Firmware, which could potentially lead to a loss of guest confidentiality. Recommendations At the moment,...

CVE-2021-26327: Improper Input Validation

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

AMD Secure Encryption Virtualization (SEV) Information Disclosure

Bulletin ID: AMD-SB-1013 Potential Impact: Information Disclosure Severity: Medium Summary AMD received notification of a potential security vulnerability from a team of researchers led by Professor Yinqian Zhang from Southern University of Science and Technology SUSTech. A paper titled...

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV)

Bulletin ID: AMD-SB-1023 Potential Impact: Loss of Integrity, Confidentiality and Availability Summary A malicious hypervisor HV along with an unprivileged process controlled by an attacker and executing in a guest VM, may maliciously control the process of flushing the Translation Lookaside Buff...

AMD Secure Encrypted Virtualization (SEV) Vulnerabilities - Lenovo Support US

No description provided...

PT-2020-18892

Name of the Vulnerable Software and Affected Versions Valve's Game Networking Sockets versions prior to v1.2.0 Description The issue arises from the improper handling of long unreliable segments in the function SNP ReceiveUnreliableSegment when configured to support plain-text messages. This lead...

CVE-2019-19661

A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp...

PT-2020-10208

Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A Cookie based reflected XSS issue exists in the Web File Manager, related to RumpusLoginUserName and snp. Recommendations For Rumpus FTP Server version 8.2.9.1, consider restricting access to the...

tomcat manager example DoS

Multiple cross-site scripting XSS vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 el/functions.jsp, 2 el/implicit-objects.jsp, and 3 jspx/textRotate.jspx in examples/jsp2/, as demonstrated via...

CVE-2000-0760: Undefined Security Weakness

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension...