CVE-2021-26943

The UX360CA BIOS through 303 on ASUS laptops allow an attacker with the ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM issue 3 of 3...

CVE-2021-26943

The UX360CA BIOS through 303 on ASUS laptops allow an attacker with the ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM issue 3 of 3...

Asus UX360CA BIOS through 303 安全漏洞

The Asus UX360CA BIOS through 303 is a laptop from Asus Japan. The UX360CA BIOS through 303 on ASUS contains a security vulnerability that can be exploited by an attacker to overwrite almost any physical memory location and execute arbitrary code in the SMM...

Weak Password Vulnerability in H3C M60 System Management

The H3C M60 is a router from Xinhua San Technology Co. A weak password vulnerability exists in the H3C M60 system management, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in H3C ER3100G2 System Management

The H3C ER3100G2 is a next-generation enterprise-class Gigabit router. A weak password vulnerability exists in the H3C ER3100G2 system management. An attacker exploits this vulnerability to log into the system backend and obtain sensitive information...

Weak Password Vulnerability in H3C ER5100G2 System Management

The ER5100G2 is a next-generation enterprise-class Gigabit wired router. A weak password vulnerability exists in the H3C ER5100G2 system management, which can be exploited by an attacker to log into the system backend and obtain sensitive information...

Weak Password Vulnerability in H3C ER3108GW System Management

ER3108GW is a new generation of enterprise-class wireless high-performance router launched by Hangzhou Huasan Communication Technology Co. A weak password vulnerability exists in the H3C ER3108GW system management, which can be exploited by an attacker to log into the system backend and obtain...

Weak Password Vulnerability in H3C ER2100 System Management

H3C ER2100 is a high-performance broadband router for small and medium-sized enterprises SMEs launched by Xinhua San Technologies Co. A weak password vulnerability exists in the system management of H3C ER2100, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in H3C ER8300G2 System Management

The H3C ER8300G2 is a new generation of enterprise-class Gigabit high-performance router from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C ER8300G2 system management, which can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in ER3260G2 system administration (CNVD-2021-22501)

ER3260G2 is a new generation of enterprise-grade Gigabit high-performance router from Xinhua San Technologies Co. A weak password vulnerability exists in the system management of ER3260G2, which can be exploited by attackers to obtain sensitive information...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Heap buffer overflow in argument parsin...

CVE-2021-36342

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Dell Inspiron 5675 BIOS Access Control Error Vulnerability

The Dell Inspiron 5675 BIOS is a Dell USA program that provides basic inputs and outputs for the device, a self-test after powering on the device, and system self-boot functionality. A security vulnerability exists in the Dell Inspiron 5675 BIOS versions prior to version 1.4.1, which can be...

CVE-2020-26186

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-26186

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-26186

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...

Dell Inspiron 5675 BIOS 访问控制错误漏洞

The Dell Inspiron 5675 BIOS is a Dell USA program that provides basic inputs and outputs for the device, a self-test after powering on the device, and system self-boot functionality. A security vulnerability exists in the Dell Inspiron 5675 BIOS versions prior to version 1.4.1, which can be...

kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c

An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...