1535 matches found
Fedora: Security Advisory for keyring-ima-signer (FEDORA-2023-37ae269843)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-31442
In Lightbend Akka before 2.8.1, the async-dns resolver used by Discovery in DNS mode and transitively by Cluster Bootstrap uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not...
[SECURITY] Fedora 38 Update: keyring-ima-signer-0.1.0-9.fc38
The IMA Integrity Measurement Architecture is a key component of the Linux integrity subsystem designed to ensure integrity, authenticity, and confidentiality of systems including hardware root of trusts TPM. This tool allows signing of files in userspace, inclusding options of including the...
CVE-2023-28863
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...
CVE-2023-28863
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...
CVE-2023-28863
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...
Design/Logic Flaw
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...
Security Issues in FINS protocol
Overview FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of Omron products. FINS commands enable to read/write information, conduct various operations and set the...
PT-2023-22014 · Ami · Megarac Spx13 +1
Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SPx12 and SPx13 devices affected versions not specified Description: The issue concerns insufficient verification of data authenticity in the affected devices. There is no information provided about the estimated number of...
AMI MegaRAC data falsification vulnerability
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...
CVE-2023-28863
Summary: CVE-2023-28863 affects AMI MegaRAC SPx12/SPx13 IPMI implementations. The issue is Insufficient Verification of Data Authenticity in IPMI 2.0 negotiation, allowing an attacker with network access to bypass negotiated integrity/confidentiality. Affected platforms include iSeries variants (...
CVE-2023-28863: Insufficient Verification of Data Authenticity
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...
CVE-2023-28863
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...
CVE-2023-27748
BlackVue DR750-2CH LTE v.1.0122022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution...
CVE-2023-27748
BlackVue DR750-2CH LTE v.1.0122022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution...
Code injection
BlackVue DR750-2CH LTE v.1.0122022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution...
CVE-2023-27748
CVE-2023-27748 affects BlackVue DR750-2CH LTE version 1.012_2022.10.26. The issue is that firmware uploads are not checked for authenticity, enabling an attacker to upload crafted firmware that can contain backdoors and allow arbitrary code execution. Documents confirm the vulnerability exists bu...
PT-2023-21318 · Blackvue · Blackvue Dr750-2Ch Lte
Name of the Vulnerable Software and Affected Versions: BlackVue DR750-2CH LTE version 1.012 2022.10.26 Description: The issue concerns the lack of authenticity check for uploaded firmware, allowing attackers to upload crafted firmware that contains backdoors and enables arbitrary code execution...
CVE-2023-27748
BlackVue DR750-2CH LTE v.1.0122022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution...