CVE-2021-26370

Improper validation of destination address in SVCLOADFWIMAGEBYINSTANCE and SVCLOADBINARYBYATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability...

PT-2022-9726

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to the failure to verify that SEV-ES TMR is not in MMIO space, which could result in a potential loss of integrity or availability due to SEV-ES FW. Recommendations A...

PT-2022-9744

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned Description The issue is related to improper validation of destination address in certain services, which may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents. This cou...

CVE-2021-26332: Undefined Security Weakness

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...

CVE-2022-24675

A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM input more than 5 MB, causing a stack overflow in Decode, which leads to a loss of availability...

CVE-2021-3499

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service...

Rockwell Automation DriveTools SP and Drives AOP

1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor : Rockwell Automation Equipment : DriveTools SP and Drives AOP Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality,...

Unspecified Vulnerability in Oracle MySQL Client (CNVD-2020-17121)

Oracle MySQL is an open source relational database management system from Oracle. An unspecified vulnerability exists in Oracle MySQL Client. An attacker could exploit this vulnerability to cause a denial of service hangs or frequent crashes, affecting data availability...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

HTTP/2: flood using empty frames results in excessive resource consumption

A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability...

The vulnerability of the Security component of the MICROS Lucas software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Security component of the MICROS Lucas software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information through HTTP requests...

CVE-2017-14018

An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed,...

aws-cfn-bootstrap Local Code Execution Vulnerability

aws-cfn-bootstrap versions prior to 1.4-22.14 suffer from a local code execution vulnerability. aws-cfn-bootstrap local code execution as root ============================================== The latest version of this advisory is available at:...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-1-4kc-malta package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libxi package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rpm package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-image-rpc package of the Debian GNU/Linux operating system may be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

KLA10025 DoS vulnerability in GOM Media Player

An unspecified vulnerability was found in the GOM Media Player. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to an unknown application via a specially designed .WAV file. Original advisories N...

KLA10231 DoS vulnerability in browser

An unspecified vulnerability was found in the browsers. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories - Exploitation Related products Mozilla-Firefox K-Meleon Netsca...

ICECast HTTP basic authorization DoS

The remote server runs ICECast 2.0.0, an open source streaming audio server. This version is affected by a remote denial of service. An remote attacker could send specially crafted URL, with a long string passed in an Authorization header that will result in a loss of availability for the service...