7600 matches found
CVE-2021-26378
Insufficient bound checks in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...
CVE-2021-26375
Insufficient General Purpose IO GPIO bounds check in System Management Unit SMU may result in access/updates from/to invalid address space that could result in denial of service...
Design/Logic Flaw
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...
Design/Logic Flaw
Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...
AMD Secure Encrypted Virtualization 安全漏洞
AMD Secure Encrypted Virtualization is a software application from AMD USA. Hardware-accelerated memory encryption to protect data in use. A security vulnerability exists in AMD Secure Encrypted Virtualization TMR that stems from a failure to verify that the SEV-ES TMR is not in MMIO space,...
AMD System Management Unit 缓冲区错误漏洞
AMD System Management Unit SMU is a system management unit of AMD, Inc. A security vulnerability exists in the System Management Unit SMU PCIe Hot Plug, which can be exploited by an attacker to cause a denial of service for invalid address space access or updates...
CVE-2021-26332
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...
CVE-2021-26352
Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...
Cross-site Scripting (XSS) in create space function
Description Reflected cross-site scripting or XSS arises when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way. Proof of Concept 1.Login as normal user. 2.Access subdomain /space/create/create. 3.Input name, color, description,...
PT-2022-7669 · Realtek · Realtek Rtsuer Driver
Name of the Vulnerable Software and Affected Versions: Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355 Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274 Description: The issue is related to insufficient input validation in the Realtek SD ca...
Fuchsia 输入验证错误漏洞
Fuchsia is an open source general purpose operating system. Fuchsia has a security vulnerability that stems from the presence of an integer overflow vulnerability. An attacker could issue a memory cache invalidation operation on a page they do not own, allowing them to control kernel memory from...
CVE-2022-24706
creationtimestamp| type| source ---|---|--- 2022-04-26 14:36:58+00:00| seen| https://t.me/cibsecurity/41424 2022-04-28 17:51:45+00:00| published-proof-of-concept| https://t.me/cKure/9439 2022-04-29 17:20:21+00:00| published-proof-of-concept| https://t.me/ShlezySecChannel/39 2022-05-22...
SureBackup VM Power On fails with: "Failed to extend swap file" or "Error: Insufficient resources."
Challenge A SureBackup job, for a VMware environment, fails during the VM Power On step with either of the following errors: Error: Module 'MonitorLoop' power on failed. Module 'MonitorLoop' power on failed. Failed to extend swap file...
CVE-2022-1364
creationtimestamp| type| source ---|---|--- 2022-04-15 08:56:41+00:00| exploited| https://t.me/cKure/9368 2022-04-15 11:36:01+00:00| exploited| https://t.me/truesecator/2853 2022-04-17 12:32:15+00:00| exploited| https://t.me/CybersecurityCourse/189 2022-04-18 01:07:08+00:00| exploited|...
CVE-2022-28345
The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with a non-breaking space, when there is a hash character in the URL. This technique allows a remote unauthenticated attacker to send legitimate looking links, appearing t...
The vulnerability of the microprogramming driver for motherboard, asRock AsrDrv103.sys, related to errors in user space restrictions, allows a hacker to execute arbitrary code in the Windows kernel.
The vulnerability of the microprogrammed driver for motherboard, asRock AsrDrv103.sys, is related to errors in memory protection. Exploiting this vulnerability allows an attacker to execute arbitrary code in the Windows kernel...
VulnCheck KEV: CVE-2020-15368
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...
CVE-2022-28251
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...
CVE-2022-28266
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...
CVE-2022-28255
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...