Lucene search
+L

535 matches found

OSV
OSV
added 2020/01/04 7:15 a.m.19 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS6.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/01/04 7:15 a.m.5 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS8.6AI score0.03163EPSS
SaveExploits1References2
Prion
Prion
added 2020/01/04 7:15 a.m.22 views

Sql injection

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

7.5CVSS9.4AI score0.03163EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/01/04 6:05 a.m.191 views

CVE-2020-5499

Summary: CVE-2020-5499 affects Baidu Rust SGX SDK up to version 1.0.8, where an enclave ID race can yield non‑deterministic results in which two global IDs are the same. The linked records consistently describe this as the enclave ID race issue and reference Baidu Rust SGX SDK 1.0.8 and earlier. ...

9.8CVSS9.4AI score0.03163EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/01/04 6:05 a.m.35 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.5AI score0.03163EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2019/12/11 9:30 a.m.10 views

New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage

A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that encrypts extremely sensitive data to shield it from attackers even when a system gets compromised. Dubbed Plundervolt and tracked as...

6.7CVSS6.9AI score0.00676EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.16 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an object processing error in memory, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Open Enclave SDK software development tools is related to an object processing error in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.0155EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/11/12 7:15 p.m.38 views

CVE-2019-1370

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

5.5CVSS6.2AI score
SaveExploits0References1
NVD
NVD
added 2019/11/12 7:15 p.m.45 views

CVE-2019-1370

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

5.5CVSS5.1AI score0.0155EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/12 7:15 p.m.22 views

Information disclosure

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

2.1CVSS5.2AI score0.0155EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/11/12 6:52 p.m.82 views

CVE-2019-1370

CVE-2019-1370 is an information-disclosure vulnerability in affected Open Enclave SDK versions caused by improper handling of objects in memory. The issue allows an attacker who has compromised the host application running the enclave to access sensitive information stored in the enclave. Microso...

5.5CVSS5.1AI score0.0155EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/12 6:52 p.m.61 views

CVE-2019-1370

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

5.2AI score0.0155EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:00 a.m.33 views

Open Enclave SDK Information Disclosure Vulnerability

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information stored in the Enclave. To exploit this vulnerability, an attacker would have to successful...

7CVSS1.4AI score0.0155EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2019/11/12 12:00 a.m.44 views

KLA11607 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual Studio can be exploited remotely ...

6.5CVSS6.3AI score0.03338EPSS
SaveExploits0References4
Symantec
Symantec
added 2019/11/12 12:00 a.m.39 views

Microsoft Open Enclave SDK CVE-2019-1370 Information Disclosure Vulnerability

Description Microsoft Open Enclave SDK is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Open Enclave SDK Recommendations Permit local access for trusted individual...

0.5AI score0.0155EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.12 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an error in object processing in memory, which allows a hacker to disclose sensitive information that is protected by this security measure.

The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

7.8CVSS5.5AI score0.02117EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2019/10/10 2:15 p.m.25 views

CVE-2019-1369

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

5.5CVSS5.1AI score0.02117EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/10 2:15 p.m.31 views

CVE-2019-1369

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

5.5CVSS6.2AI score
SaveExploits0References1
Prion
Prion
added 2019/10/10 2:15 p.m.23 views

Information disclosure

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

2.1CVSS5.3AI score0.02117EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/10 1:28 p.m.30 views

CVE-2019-1369

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'...

5.4AI score0.02117EPSS
SaveExploits0References1
Rows per page
Query Builder