117 matches found
crypto: marvell/cesa - Handle zero-length skcipher requests
...
Akamai ASE 安全漏洞
Akamai ASE is an adaptive security engine from Akamai. A security vulnerability exists in Akamai ASE versions prior to 2024-12-10, which stems from Rule 3000216 not properly handling JavaScript variable assignments...
SUSE CVE-2024-36468
The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...
DEBIAN-CVE-2024-36468
The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...
UBUNTU-CVE-2024-36468
The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...
A vulnerability in the Microprogramming Software Subsystem of the Intel Converged Security and Manageability Engine (CSME) exists, due to insufficient validation of input data. This allows attackers to trigger a service failure.
The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure...
PT-2024-8890 · Intel · Intel Csme
Name of the Vulnerable Software and Affected Versions: IntelR CSME affected versions not specified Description: The issue is related to improper initialization in the firmware of some IntelR CSME, which may allow a privileged user to potentially enable information disclosure via local access. Thi...
DEBIAN-CVE-2024-41002
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SEC resources. When releasing resources, it need to release the AIV resources at the same time. Otherwise, memory leakage occurs. The aiv...
PT-2024-19495 · Kwik · Kwik
Name of the Vulnerable Software and Affected Versions: Kwik version 745fd4e2 Description: The TLS engine does not track the current state of the connection, allowing Client Hello messages to be overwritten at any time, including after a connection has been established. Recommendations: For versio...
SUSE CVE-2019-11087
Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...
SUSE CVE-2019-11101
Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...
SUSE CVE-2019-11104
Insufficient input validation in MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...
多款Intel产品授权问题漏洞
Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...
多款Intel产品授权问题漏洞
Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...
多款Intel产品输入验证错误漏洞
Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...
多款Intel产品代码问题漏洞
Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...
Mitigating Spring Core “Spring4Shell” Zero-Day
When Spring, the Java-based application, fell victim to cyberattacks, Akamai's Adaptive Security Engine detected zero-day attacks and protected customers against them...
Lenovo ThinkPad 输入验证错误漏洞
Lenovo ThinkPad is a portable computer from Lenovo China. An input validation error vulnerability exists in the SMI callback function used in the CSME configuration of some Lenovo laptops and ThinkPad systems, which can be exploited by an attacker to obtain data outside the scope of SMRAM...
The Adaptive Security Engine -- A Quantum Leap Forward for Application and API Protection
At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...
The Adaptive Security Engine – A Quantum Leap Forward for Application and API Protection
At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...