HPESBHF03789 rev.2 - Certain HPE Gen9 Systems with HP Trusted Platform Module v2.0 Option, Unauthorized Access to Data

Potential Security Impact: Local: Unauthorized Access to Data; Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Trusted Platform Module 2.0 Kit FW 5.51 - TPM 2.0 FW 5.62 is not affected. This is the Gen9 TPM 2.0 option only Gen9 servers could...

gen-rent.com XSS vulnerability

Open Bug Bounty ID: OBB-303445 Description| Value ---|--- Affected Website:| gen-rent.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SGX Update

Summary: Intel has released updates that improve the security of Intel® Software Guard Extensions Intel® SGX. Description: Intel has released updates that improve the security of Intel® Software Guard Extensions Intel® SGX. The improvement applies to 6th and 7th Generation Intel® Core™ Processor...

gen-aircraft-hardware.com XSS vulnerability

Open Bug Bounty ID: OBB-258626 Description| Value ---|--- Affected Website:| gen-aircraft-hardware.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

CVE-2016-3095

server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key...

CVE-2016-3108

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack...

Windows 10 Creators Update provides next-gen ransomware protection

Multiple high-profile incidents have demonstrated that ransomware can have catastrophic effects on all of us. From personally losing access to your own digital property, to being impacted because critical infrastructure or health care services are unexpectedly unavailable for extended periods of...

PT-2017-8331

Name of the Vulnerable Software and Affected Versions Pulp versions prior to 2.8.2 Description The issue allows local users to read the generated private key due to a problem in the server/bin/pulp-gen-ca-certificate functionality. Recommendations For versions prior to 2.8.2, update to version...

CVE-2016-3108: Improper Link Resolution Before File Access

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack...

CVE-2016-3095: Exposure of Sensitive Information to an Unauthorized Actor

server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key...

Design/Logic Flaw

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation...

UBUNTU-CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-5685

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical access to the system to gain access to personal information...

Information disclosure

The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to personal information...

Information disclosure

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to personal information...

Information disclosure

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical access to the system to gain access to personal information...

CVE-2017-5686

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to personal information...

CVE-2017-5686

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to personal information...

CVE-2017-5684

The CVE-2017-5684 entry concerns BIOS-related information disclosure on Intel Compute Stick systems built on 6th Gen Intel Core processors. Affected condition: BIOS versions prior to CC047 may allow an attacker with physical access to the system to gain access to personal information. The issue i...

CVE-2017-5686

The CVE-2017-5686 entry concerns Intel NUC systems with 6th Gen Intel Core CPUs, where BIOS versions prior to SY0059 may allow a local attacker with physical access to disclose personal information. The vulnerability is tied to the BIOS layer, not the OS, and the documented impact is information ...