CVE-2021-22665

CVE-2021-22665 affects Rockwell Automation DriveTools SP (v5.13 and below) and Drives AOP (v4.12 and below), where an attacker with limited local privileges can exploit an Uncontrolled Search Path Element (CWE-427) to escalate privileges and gain complete control of the system. The Red Hat/NVD/IC...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Rockwell Automation DriveTools SP and Drives AOP

1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor : Rockwell Automation Equipment : DriveTools SP and Drives AOP Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality,...

Rockwell Automation DriveTools SP and Drives AOP Code Issue Vulnerability

A code issue vulnerability exists in Rockwell Automation DriveTools SP and Drives AOP that arises from improper design or implementation during code development for a networked system or product...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

Multiple Samsung Products Security Vulnerabilities

Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...

CVE-2020-12311

Insufficient control flow managementin firmware in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...

PT-2020-4382 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows kernel affected versions not specified Description: An information disclosure issue exists due to the Windows kernel's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to...

firefox security update

68.6.1-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Horak - Update to 68.6.0 build1 68.5.0-3 - Added fix for rhbz1805667 - Enabled mzbz@1170092 - Firefox prefs at /etc Fri Feb 07 2020 J...

VictoryGate cryptominer infected 35,000 devices via USB drives

By Waqas VictoryGate is the name of a malware botnet that remained undocumented until recently while being active since May 2019. This is a post from HackRead.com Read the original post: VictoryGate cryptominer infected 35,000 devices via USB drives...

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through a missing sanity check was found in vbdcreate in the Xen hypervisor implementation. As CD-ROM drives are not supported by the blkback back-end driver, attempting to use a virtual CD-ROM drive with blkback could trigge...

firefox security update

68.7.0-2.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 68.7.0-2 - Update to 68.7.0 build3 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Hora...

CVE-2019-11686

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...

CVE-2019-19278

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 HMIs 12 inches or larger All versions, SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... High Availability All versions...

Design/Logic Flaw

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 HMIs 12 inches or larger All versions, SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... High Availability All versions...

CVE-2019-19278

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 HMIs 12 inches or larger All versions, SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... High Availability All versions...

Stolen: Unencrypted hard drives with data of 29,000 Facebook employees

By Waqas A thief stole unencrypted hard drives with sensitive data of 29,000 Facebook employees. Here's what happened what data was in there: This is a post from HackRead.com Read the original post: Stolen: Unencrypted hard drives with data of 29,000 Facebook employees...

CentOS Update for bpftool CESA-2019:3979 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...