Lucene search
+L

7706 matches found

CNNVD
CNNVD
added 2022/08/11 12:00 a.m.8 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from a side-channel information disclosure in USB Manager, which can be exploited by an attacker to obtain sensitive information...

5.5CVSS5.7AI score0.00096EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.4 views

PT-2022-5521 · Amd +2 · Amd Processor Microcode +2

Name of the Vulnerable Software and Affected Versions: AMD processor microcode affected versions not specified Description: The issue is related to the implementation of the Indirect Branch Prediction Barrier IBPB mechanism in AMD processor microcode, which may lead to a potential information...

8.6CVSS6AI score0.01189EPSS
SaveExploits0References68
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.11 views

PT-2022-14501 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue allows an attacker to determine whether an app is installed without requiring query permissions, due to side channel information disclosure in DevicePolicyManager. This could lead to local...

5.5CVSS5.2AI score0.001EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.5 views

PT-2022-14514 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...

5.5CVSS5AI score0.001EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.12 views

PT-2022-14530 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure that could allow determination of a user's account, potentially leading to local information disclosure. This requires User execution privileges...

5.5CVSS5AI score0.001EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/11 12:00 a.m.8 views

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a vulnerability in its PackageManager that allows an attacker to use side-channel probing to determine whether an application is installed without...

3.3CVSS5.1AI score0.001EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.8 views

PT-2022-14558 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosu...

5.5CVSS5.1AI score0.001EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.9 views

PT-2022-14474 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure in LocaleManager, allowing an attacker to determine if an app is installed without requiring query permissions. This could lead to local...

3.3CVSS3.5AI score0.00095EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/11 12:00 a.m.8 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from the leakage of side-channel information in Telephony, which can be exploited by an attacker to obtain sensitive information...

5.5CVSS5.8AI score0.00096EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.10 views

PT-2022-14499 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...

5.5CVSS5AI score0.001EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.10 views

PT-2022-14500 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: A side channel information disclosure issue exists in DevicePolicyManager, allowing an attacker to determine whether an app is installed without query permissions. This could lead to local information...

5.5CVSS5.2AI score0.001EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/10 11:00 p.m.10 views

CVE-2022-20866

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

7.5CVSS7.3AI score0.17313EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/10 8:15 p.m.48 views

CVE-2021-46778

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading SMT. By measuring the contention level on scheduler queues an attacker may potentially leak sensitive...

5.6CVSS0.0023EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/10 8:15 p.m.30 views

Information disclosure

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading SMT. By measuring the contention level on scheduler queues an attacker may potentially leak sensitive...

1CVSS5.6AI score0.0023EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/10 5:15 p.m.12 views

CVE-2022-20866

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

7.5CVSS5.8AI score0.17313EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/10 5:15 p.m.34 views

Design/Logic Flaw

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

5CVSS7.4AI score0.17313EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2022/08/10 4:20 p.m.8 views

CVE-2022-20866 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

7.4CVSS5.5AI score0.17313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/10 12:00 a.m.13 views

PT-2022-4105 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.16.1 and later Cisco Firepower Threat Defense FTD Software versions 7.0.0 and later Description: A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security...

7.5CVSS7.6AI score0.17313EPSS
SaveExploits0References9
Lenovo
Lenovo
added 2022/08/09 10:03 p.m.8 views

AMD Processor Execution Unit Scheduler Contention Side-Channel Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2022/08/09 8:20 p.m.53 views

CVE-2021-46778

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading SMT. By measuring the contention level on scheduler queues an attacker may potentially leak sensitive...

5.8AI score0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder