Lucene search
+L

53 matches found

OPENSUSE Linux
OPENSUSE Linux
added 2018/05/25 11:32 a.m.184 views

Security update for the Linux Kernel (important)

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are...

2.6AI score0.60631EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2018/05/23 12:00 a.m.26 views

Oracle Linux 6 : kernel (ELSA-2018-1651)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1651 advisory. - x86 x86/kvm: fix CPUID7EDX word 18 mask Jan Stancek 1566893 1566899 CVE-2018-3639 - x86 x86/specctrl: Fix late microcode problem with AMD Waiman Long 1566893...

5.5CVSS7.1AI score0.60631EPSS
SaveExploits3References2
Prion
Prion
added 2018/05/22 12:29 p.m.27 views

Design/Logic Flaw

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...

2.1CVSS5.8AI score0.60631EPSS
SaveExploits3References147Affected Software76
OSV
OSV
added 2018/05/22 12:29 p.m.29 views

CVE-2018-3639

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...

5.5CVSS5.6AI score
SaveExploits0References147
Cvelist
Cvelist
added 2018/05/22 12:00 p.m.37 views

CVE-2018-3639

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...

6.1AI score0.60631EPSS
SaveExploits3References147
CVE
CVE
added 2018/05/22 12:00 p.m.889 views

CVE-2018-3639

CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...

5.5CVSS5.9AI score0.60631EPSS
SaveIn wildExploits3References147Affected Software201
ATTACKERKB
ATTACKERKB
added 2018/05/22 12:00 a.m.922 views

CVE-2018-3639

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...

5.5CVSS5.1AI score0.60631EPSS
SaveIn wildExploits3References148
MSRC
MSRC
added 2018/05/21 7:00 a.m.30 views

Analysis and mitigation of speculative store bypass (CVE-2018-3639)

In January, 2018, Microsoft published an advisory and security updates for a new class of hardware vulnerabilities involving speculative execution side channels known as Spectre and Meltdown. In this blog post, we will provide a technical analysis of an additional subclass of speculative executio...

5.5CVSS7AI score0.60631EPSS
SaveExploits3
Kaspersky
Kaspersky
added 2018/05/21 12:00 a.m.75 views

KLA11893 Microsoft Advisory for Microsoft Products (ESU)

Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown. Also, a new subclass of speculative execution side channel vulnerabilities known as Speculative Store Bypass SSB has been announced and assigned...

5.5CVSS7.2AI score0.60631EPSS
SaveExploits3References9
Openbugbounty
Openbugbounty
added 2015/12/21 8:08 a.m.11 views

ssbonline.biz XSS vulnerability

Vulnerable URL: http://www.ssbonline.biz/speedbump.asp?link=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7329665 Google Pagerank| 2...

6.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/04/24 12:00 a.m.15 views

Mihao8 CMS Cross Site Scripting

Title:Mihao8 CMS Multiple XSS Vulnerabilities Author£ºriuskskȪ¸ç Blog£ºhttp://riusksk.blogbus.com Data£º2010-4-23 =====================================================0x1======================================================================...

0.2AI score
SaveExploits0
NVD
NVD
added 2006/02/18 2:02 a.m.21 views

CVE-2006-0750

SQL injection vulnerability in army.php in supersmashbrothers SSB Army System 2.1.0 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php...

7.5CVSS8.4AI score0.01251EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2006/02/18 2:00 a.m.30 views

CVE-2006-0750

SQL injection vulnerability in army.php in supersmashbrothers SSB Army System 2.1.0 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php...

8.4AI score0.01251EPSS
SaveExploits2References6
Rows per page
Query Builder