3297 matches found
CVE-2021-26313
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage...
PT-2021-5824 · Unknown +2 · Cpu Products +2
Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified CPU products affected versions not specified Description: The issue is related to a potential speculative code store bypass in CPU products, which, in conjunction with software vulnerabilities related to...
Speculative Code Store Bypass (SCSB) and Floating-Point Value Injection (FPVI) Advisory - Lenovo Support US
No description provided...
Speculative Code Store Bypass and Floating-Point Value Injection
Bulletin ID: AMD-SB-1003 Potential Impact: Data Leakage Severity: Medium Summary AMD is aware of research from the VUsec group at Vrije Universiteit Amsterdam and believes that these issues are only exploitable in conjunction with software vulnerabilities related to incorrect speculation of...
Shifting the focus from reactive to proactive, with human-led secure coding
The same 10 software vulnerabilities have caused more security breaches in the last 20+ years than any others. And yet, many businesses still opt for post-breach, post-event remediation, muddling through the human and business ramifications of it all. But now, a new research study points to a new...
The Vulnerabilities of the Past Are the Vulnerabilities of the Future
Major software vulnerabilities are a fact of life, as illustrated by the fact that Microsoft has patched between 55 and 110 vulnerabilities each month this year – with 7% to 17% of those vulnerabilities being critical. May had the fewest vulnerabilities, with a total of 55 and only four considere...
SUSE-SU-2021:1840-1 Security update for xstream
This update for xstream fixes the following issues: - Upgrade to 1.4.16 - CVE-2021-21351: remote attacker to load and execute arbitrary code bsc1184796 - CVE-2021-21349: SSRF can lead to a remote attacker to request data from internal resources bsc1184797 - CVE-2021-21350: arbitrary code executio...
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post is intended to provide an update on our findings, give additional recommendations to network defenders, and discuss potential...
Shenzhen Edmansi Technology Co., Ltd. soft Xietong there are information leakage vulnerabilities
SoftAssociate is a set of association office management software customized and developed specifically for software industry associations. Shenzhen Edmansi Technology Co., Ltd. soft Xietong there is an information leakage vulnerability, attackers can use the vulnerability to obtain sensitive...
OPENSUSE-SU-2021:0692-1 Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. - CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal bsc1185410. - CVE-2021-3516: Fixed a use after free in...
SUSE-SU-2021:1310-1 Security update for librsvg
This update for librsvg fixes the following issues: - librsvg was updated to 2.42.9: Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 bsc1148293 -the bundled version of the cssparser crate now builds correctly on Rust 1.43 bsc11815...
CVE-2021-2298 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2304 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2232 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2194 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2201 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2166 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2170 vulnerabilities
Vulnerabilities for packages: mysql...