2630 matches found
CVE-2017-5703: Improper Privilege Management
Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service...
Unsafe Opcodes exposed in Intel SPI based products
Summary: Configuration of SPI Flash in platforms based on multiple Intel CPUs allows a local attacker to alter the behavior of the SPI Flash, potentially leading to a Denial of Service. This issue has been root-caused, and the mitigation has been validated and is available. Description:...
PT-2018-8262
Name of the Vulnerable Software and Affected Versions: Intel platforms affected versions not specified Description: A configuration issue in the SPI Flash of Intel platforms allows a local attacker to modify the behavior of the SPI flash, potentially resulting in a Denial of Service...
CVE-2018-1295
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...
CVE-2018-1295
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...
CVE-2018-1295
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...
PT-2018-11501
Name of the Vulnerable Software and Affected Versions Apache Ignite versions 2.3 and earlier Description The issue arises from the lack of a whitelist for classes allowed for serialization and deserialization in the serialization mechanism. This allows for the execution of arbitrary code when...
CVE-2018-1295: Deserialization of Untrusted Data
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...
HPSBHF03572 rev. 4 - Unsafe Opcodes Exposed in SPI
Potential Security Impact Denial of Service Source: Intel Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with how the SPI interface is configured on certain platforms. Specific SPI OpCodes may be left accessible and vulnerable to misuse. In the...
Intel® NUC BIOS Security Updates
Summary: This update mitigates multiple vulnerabilities related to security features in certain Intel® NUC system firmware BIOS. Description: BIOS Administrator and User password bypass: Insufficient protection of password storage in system firmware for NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH,...
spi-integradora.com.br XSS vulnerability
Vulnerable URL: http://www.spi-integradora.com.br/?lang=en!prettyPhoto/1/x,%3Csvg/onload=alert%27openbugbounty%27%3E/x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19860958 VIP...
GIGABYTE BRIX Mini PCs suffer from a flawed firmware protection mechanism vulnerability
GIGABYTE is a professional motherboard manufacturer in Taiwan, GB-BSi7H-6500 and GB-BXi7-5775 are the BRIX series of mini PCs. UEFI, or Unified Extensible Firmware Interface, is a standard that describes a detailed type of interface. This interface is used to automatically load the operating syst...
spi-reports.com XSS vulnerability
Vulnerable URL: http://www.spi-reports.com/search.php?search=pea+protein%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E+ingredients+market Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:...
CVE-2016-3846
The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...
CVE-2016-3846
The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...
Code injection
The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...
CVE-2016-3846
The vulnerability CVE-2016-3846 affects the Serial Peripheral Interface (SPI) driver in Android on Nexus 5X and Nexus 6P (before 2016-08-05). Root cause: an internal bug (28817378) enables a local attacker’s crafted app to escalate privileges within the kernel. Impact: privilege escalation could ...
CVE-2016-3808
The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009...