Lucene search
+L

270 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/28 12:00 a.m.•13 views

CVE-2020-25775: Concurrent Execution using Shared Resource with Improper Synchronization

The Trend Micro Security 2020 v16 consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges...

6.3CVSS6AI score0.00298EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/28 12:00 a.m.•7 views

PT-2020-16199

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2020 version 16 Description The issue allows an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges due to a security race condition arbitrary file deletion...

6.3CVSS0.00298EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2020/09/28 12:00 a.m.•55 views

Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

5.3CVSS3.7AI score0.00298EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/08 10:15 a.m.•32 views

Design/Logic Flaw

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data erase or a factory reset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

7.2CVSS7.6AI score0.0016EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/09/08 9:31 a.m.•58 views

CVE-2019-14089

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data erase or a factory reset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

7.7AI score0.0016EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/08 12:00 a.m.•4 views

CVE-2019-14089: Use of a Broken or Risky Cryptographic Algorithm

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data erase or a factory reset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

7.8CVSS5.7AI score0.0016EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2020/09/01 9:14 p.m.•38 views

Malicious Package in soket.js

All versions of soket.js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This...

4.1AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/07/13 5:15 p.m.•17 views

CVE-2019-19338

A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort TAA error occurs. When a guest is running on a host CPU affected by the TAA flaw TAANO=0, but is no...

5.5CVSS7.8AI score0.00479EPSS
SaveExploits0References3
OSV
OSV
•added 2019/10/25 3:15 p.m.•8 views

CVE-2016-5202

browser/extensions/api/dial/dialregistry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase call, which causes the erase operation to access data that that erase operation will destroy...

9.1CVSS5.8AI score0.00791EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2019/10/25 1:30 p.m.•50 views

CVE-2016-5202

Removed by vendor...

9.1CVSS9.3AI score0.00791EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/25 12:00 a.m.•3 views

CVE-2016-5202: Incorrect Permission Assignment for Critical Resource

browser/extensions/api/dial/dialregistry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase call, which causes the erase operation to access data that that erase operation will destroy...

9.1CVSS7.7AI score0.00791EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2019/02/21 8:27 p.m.•155 views

Eraser - Secure Erase Files from Hard Drives on Windows

Eraser is an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Eraser is currently supported under Windows XP with Service Pack 3, Windows Server 2003 with Service Pack 2,...

7AI score
SaveExploits0
OSV
OSV
•added 2019/02/11 9:29 p.m.•13 views

CVE-2019-6489

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

5.3CVSS6.1AI score0.00943EPSS
SaveExploits0References1
Prion
Prion
•added 2019/02/11 9:29 p.m.•28 views

Code injection

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

6.4CVSS5.4AI score0.00943EPSS
SaveExploits0References1Affected Software40
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/11 12:00 a.m.•7 views

CVE-2019-6489: Undefined Security Weakness

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

6.4CVSS5.8AI score0.00943EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/02/11 12:00 a.m.•3 views

PT-2019-18113

Name of the Vulnerable Software and Affected Versions Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 Description The issue allows remote attackers to erase stored shortcuts on certain Lexmark devices. Recommendations For Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before...

6.4CVSS0.00943EPSS
SaveExploits0References3
nodejs
nodejs
•added 2018/08/09 5:28 a.m.•33 views

Malicious Package

Overview All versions of regenraotr are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendatio...

7.5AI score
SaveExploits0Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2018/08/08 2:16 p.m.•104 views

How to Restore Your Mac to Factory Settings

Restoring your Mac to the factory settings can help fix problems if nothing else has worked. You should also restore your Mac to the factory settings before giving away or selling it to get rid of all your personal files and information. Because following the instructions below will wipe out all ...

6.8AI score
SaveExploits0
Prion
Prion
•added 2018/07/06 5:29 p.m.•30 views

Code injection

Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850...

4.6CVSS7.8AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
•added 2018/07/06 5:29 p.m.•31 views

CVE-2018-11257

Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850...

7.8CVSS7.4AI score0.00195EPSS
SaveExploits0References1
Rows per page
Query Builder