4752 matches found
PT-2019-15571 · Shapeshift · Keepkey
Name of the Vulnerable Software and Affected Versions: ShapeShift KeepKey hardware wallet versions prior to 6.2.2 Description: The issue is related to insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet. This allows a partial reset of cryptographic secrets to...
CVE-2019-7183
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions...
Unexpected Page Fault in Virtualized Environment Advisory - Lenovo Support US
No description provided...
Intel Processors Voltage Settings Modification Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29846 Potential Impact: Escalation of Privilege, Information Disclosure Scope of Impact: Industry-wide Severity: High CVE Identifier: CVE-2019-11157 Summary Description: Intel reported a potential security vulnerability in some Intel CPUs may allow escalation of...
TCL Communication Alcatel Cingular Flip 2 B9HUAH1 Injection Vulnerability
The TCL Communication Alcatel Cingular Flip 2 B9HUAH1 is a cell phone from TCL Communication TCL, a Chinese company. A security vulnerability exists in the TCL Communication Alcatel Cingular Flip 2 B9HUAH1, which stems from an undocumented Web API in the device that allows JavaScript code to be...
PT-2019-15297 · Ge · Relion 670 Series +1
Name of the Vulnerable Software and Affected Versions: Relion 650 series versions 1.3.0.5 and prior Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior Description: An attacker may use a specially crafted message to force the device to reboot, which could cause a denial of service...
CVE-2019-16243
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. This web API is normally used by the system application...
CVE-2019-16243
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. This web API is normally used by the system application...
ThinkPad USB-C Dock Vulnerability - Lenovo Support US
No description provided...
TPM-Fail Attacks Against Cryptographic Coprocessors
Really interesting research: TPM-FAIL: TPM meets Timing and Lattice Attacks, by Daniel Moghimi, Berk Sunar, Thomas Eisenbarth, and Nadia Heninger. Abstract: Trusted Platform Module TPM serves as a hardware-based root of trust that protects cryptographic keys from privileged system and physical...
Intel Converged Security and Management Engine Elevation of Privilege Vulnerability
Intel Converged Security and Management Engine CSME is a security management engine from Intel Corporation USA. A security vulnerability exists in the firmware update software in Intel CSME versions prior to 12.0.45, prior to 13.0.10, and prior to 14.0.10, which stems from insufficient input...
openSUSE Security Update : bcm20702a1-firmware (openSUSE-2019-2477)
This update for bcm20702a1-firmware fixes the following issues : Changes in bcm20702a1-firmware : - Use https to fetch the archive to avoid person-in-the-middle attacks boo1154083 - Fetch & install another variant firmware 0a5c:21e8 boo1087996 C Tenable Network Security, Inc. The descriptive text...
OPENSUSE-SU-2019:2477-1 Recommended update for bcm20702a1-firmware
This update for bcm20702a1-firmware fixes the following issues: Changes in bcm20702a1-firmware: - Use https to fetch the archive to avoid person-in-the-middle attacks boo1154083 - Fetch & install another variant firmware 0a5c:21e8 boo1087996...
ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29406 Potential Impact: Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-16863 Summary Description: ST Microelectronics has reported a vulnerability in the implementation of the Elliptic Digital Signature Algorithm ECDSA...
Multi-vendor BIOS Security Vulnerabilities - Lenovo Support US
No description provided...
Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-27716 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0131, CVE-2019-0165, CVE-2019-0166, CVE-2019-0168, CVE-2019-0169, CVE-2019-11086, CVE-2019-11087,...
Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US
No description provided...
Intel Ethernet 700 Series Controller Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-27715 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0139, CVE-2019-0140, CVE-2019-0142, CVE-2019-0143, CVE-2019-0145, CVE-2019-0146, CVE-2019-0147,...
Intel Ethernet 700 Series Controller Vulnerabilities - Lenovo Support US
No description provided...
Apple iOS AppleFirmwareUpdateKext Arbitrary Code Execution Vulnerability
Apple iOS is an operating system on Apple smart devices. Apple iOS AppleFirmwareUpdateKext arbitrary code execution vulnerability can be exploited by a local attacker to execute arbitrary code...