PT-2019-6966

Name of the Vulnerable Software and Affected Versions WordPress Xorbin Digital Flash Clock version 1.0 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially...

PT-2019-6965

Name of the Vulnerable Software and Affected Versions Xorbin Analog Flash Clock extension for Joomia version 1.0 Description The issue is related to a XSS problem in the Xorbin Analog Flash Clock 1.0 extension for Joomia. No information is provided about the estimated number of potentially affect...

New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage

A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that encrypts extremely sensitive data to shield it from attackers even when a system gets compromised. Dubbed Plundervolt and tracked as...

Denial Of Service (DoS)

benbjohnson/clock is vulnerable to denial of service. The Stop function in the file clock.go does not use locking functionalities to handle the ticker, which could result in a denial of service condition in the application...

PT-2020-12286

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.5 Description The issue is caused by a use-after-free due to a race condition between the release of ptp clock and cdev while resource deallocation. This occurs when a high-privileged process allocates a ptp...

DEBIAN-CVE-2019-19083

Memory leaks in clocksourcecreate functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service memory consumption. This affects the dce112clocksourcecreate function in drivers/gpu/drm/amd/display/dc/dce112/dce112resource.c, the...

UBUNTU-CVE-2019-19083

Memory leaks in clocksourcecreate functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service memory consumption. This affects the dce112clocksourcecreate function in drivers/gpu/drm/amd/display/dc/dce112/dce112resource.c, the...

CVE-2019-19083

Memory leaks in clocksourcecreate functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service memory consumption. This affects the dce112clocksourcecreate function in drivers/gpu/drm/amd/display/dc/dce112/dce112resource.c, the...

CVE-2019-19083

Memory leaks in clocksourcecreate functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service memory consumption. This affects the dce112clocksourcecreate function in drivers/gpu/drm/amd/display/dc/dce112/dce112resource.c, the...

Linux kernel memory leak vulnerability (CNVD-2019-41274)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the clocksourcecreate function under drivers/gpu/drm/amd/display/dc in Linux...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Authentication flaw

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

CVE-2019-5213 affects Huawei Honor Play Cornell-AL00A devices running versions earlier than 9.1.0.321 (C00E320R1P1T8). The issue stems from a logic judgment error that enables an attacker to modify alarm clock settings without unlocking the screen. Huawei PSIRT notes the vulnerability and has rel...

PT-2019-17506

Name of the Vulnerable Software and Affected Versions Honor Play smartphones versions earlier than 9.1.0.321C00E320R1P1T8 Description The issue is related to insufficient authentication, which is caused by a logic judge error under certain scenarios. This could allow an attacker to modify alarm...

CVE-2019-5213: Improper Authentication

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-10524

CVE-2019-10524 involves a lack of validation for a negative value returned by get_clk, which is misinterpreted as a valid pointer, causing a use-after-free in the Qualcomm clk driver across numerous Snapdragon platforms (e.g., Snapdragon Auto/Mobile/IoT variants). The issue enables local exploita...

Security Advisory - Insufficient Authentication Vulnerability in Several Smartphones

There is an insufficient authentication vulnerability on several smartphones. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock...

PT-2019-4396 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.8 Description: The issue is related to a memory leak in the clock source create function under /gpu/drm/amd/display/dc in the Linux kernel. This leak can be exploited by a remote attacker to cause a denial o...

Update for Windows 8.1 and Windows Server 2012 R2: April 25, 2019

Update for Windows 8.1 and Windows Server 2012 R2: April 25, 2019 Summary This update includes the quality improvements from KB4493467, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that causes th...