167 matches found
PT-2021-2640
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches affected versions not specified Description The issue is related to an improper check in the code function that manages the verification of the digital signatures of system...
CVE-2021-1441: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is...
CVE-2021-1452: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the ROM Monitor ROMMON of Cisco IOS XE Software for Cisco Catalyst IE3200, IE3300, and IE3400 Rugged Series Switches, Cisco Catalyst IE3400 Heavy Duty Series Switches, and Cisco Embedded Services 3300 Series Switches could allow an unauthenticated, physical attacker to execute...
CVE-2021-27074
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-27080
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-27080
Azure Sphere Unsigned Code Execution Vulnerability...
Remote code execution
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-27074
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-27074 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2021-27080 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2021-27074: Undefined Security Weakness
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-27080: Undefined Security Weakness
Azure Sphere Unsigned Code Execution Vulnerability...
Azure Sphere Unsigned Code Execution Vulnerability
...
AZL-6460 CVE-2020-14372 affecting package grub2 for versions less than 2.06~rc1-7
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...
CVE-2020-14372: Incomplete List of Disallowed Inputs
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...
CVE-2021-1244: Improper Verification of Cryptographic Signature
Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...
PT-2021-1916
Name of the Vulnerable Software and Affected Versions Cisco Network Convergence System NCS 540 Series Routers versions running Cisco IOS XR NCS540L software images Cisco IOS XR Software for the Cisco 8000 Series Routers affected versions not specified Description The issue is related to multiple...
PT-2021-1962
Name of the Vulnerable Software and Affected Versions: Cisco Network Convergence System NCS 540 Series Routers versions running Cisco IOS XR NCS540L software images Cisco IOS XR Software for the Cisco 8000 Series Routers affected versions not specified Description: The issue is related to errors ...
Microsoft Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere is a secure, advanced application platform with built-in communications and security features for connected devices. An unsigned code execution vulnerability exists in Microsoft Azure Sphere versions prior to 20.08. An attacker could exploit the vulnerability to execute code...