katello-installer-base: QMF methods exposed to goferd via qdrouterd

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent. A malicious user authenticated to a host registered to Satellite or Capsule can use this flaw to access QMF methods to any host also registered to Satellite or Capsule and...

katello-installer-base: QMF methods exposed to goferd via qdrouterd

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent. A malicious user authenticated to a host registered to Satellite or Capsule can use this flaw to access QMF methods to any host also registered to Satellite or Capsule and...

Capsule Technologies SmartLinx Neuron 2 restricted environment protection mechanism failure vulnerability

Summary A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in ful...

Anker Nebula Capsule Pro Denial of Service Vulnerability

The Anker Nebula Capsule Pro is a projector device from Anker Innovations, USA. A security vulnerability exists in the Anker Nebula Capsule Pro NBUIM1V2.1.9 version. An attacker can exploit the vulnerability by sending data to the WifiService with the help of a specially crafted application to...

CVE-2018-19980

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

CVE-2018-19980

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

Code injection

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

CVE-2018-19980

Anker Nebula Capsule Pro NBUIM1V2.1.9 devices allow attackers to cause a denial of service reboot of the underlying Android 7.1.2 operating system via a crafted application that sends data to WifiService...

CVE-2018-19980

The CVE-2018-19980 vulnerability affects the Anker Nebula Capsule Pro NBUI_M1_V2.1.9 (Android 7.1.2). A crafted application sending data to WifiService can cause a denial of service, resulting in a reboot of the device. Connected sources (NVD, CNVD/CVELIST) confirm the impact as a DoS with an And...

Critical Flaws in Syringe Pump, Device Gateways Threaten Patient Safety

Two previously undocumented, critical vulnerabilities in widely deployed medical devices have sparked patient-safety and data-privacy concerns. Flaws in the Qualcomm Life Capsule Datacaptor Terminal Server and the Becton Dickinson BD Alaris TIVA Syringe Pump have been acknowledged by the vendors...

ICSMA-18-240-01_Qualcomm Life Capsule

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Qualcomm Life Equipment: Capsule Datacaptor Terminal Server DTS Vulnerability: Code Weakness 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute...

About the security content of AirPort Base Station Firmware Update 7.7.9

About the security content of AirPort Base Station Firmware Update 7.7.9 This document describes the security content of AirPort Base Station Firmware Update 7.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

CompuLab Intense PC Input Validation Vulnerability

The CompuLab Intense PC is a miniature PC device from CompuLab Israel. A security vulnerability exists in CompuLab Intense PCs using firmware version cr2.2.0.400.2, which stems from a failure of the Phoenix SecureCore UEFI firmware to perform capsule signature verification. An attacker can exploi...

CVE-2017-9457

Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS...

CVE-2017-9457

Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS...

Capsule Workspace - Apache license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Capsule Workspace published at the 'play' market has multiple vulnerabilities...

Moderate: Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server

Red Hat Satellite 6.2 now available for Red Hat Enterprise Linux 6 and 7 Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs...

UEFI EDK2 Capsule Update Vulnerabilities

Lenovo Security Advisory: LEN-2014-001 Potential Impact: Execution of arbitrary code Severity: Medium Summary: The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description: The open source EDK2 project provides a reference implementation of...

UEFI EDK2 Capsule Update Vulnerabilities - Lenovo Support US

No description provided...

RHEL 6 / 7 : Satellite 6.1.7 (RHSA-2016:0174)

Updated Satellite 6.1 packages that fix one security issue, add one enhancement, and fix several bugs are available for Satellite 6.1.7. Red Hat Product Security has rated this update as having Moderate Security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...