Lucene search
+L

1318 matches found

Positive Technologies
Positive Technologies
added 2021/04/09 12:0 a.m.15 views

PT-2021-16549 · Unknown · Managed Provisioning

Name of the Vulnerable Software and Affected Versions: Managed Provisioning versions prior to SMR APR-2021 Release 1 Description: The issue is related to an improper caller check in Managed Provisioning, allowing an unprivileged application to install arbitrary applications, grant device admin...

8.8CVSS8.5AI score0.00177EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/04/09 12:0 a.m.11 views

Samsung SMR 输入验证错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR APR-2021 Release 1, which allows an unprivileged application to install arbitrary applications, grant device...

8.8CVSS5.8AI score0.00177EPSS
SaveExploits1References5
OSV
OSV
added 2021/04/06 7:15 p.m.3 views

DEBIAN-CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.4AI score0.00332EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/06 7:15 p.m.12 views

CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS5.5AI score0.00332EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/04/06 7:15 p.m.4 views

UBUNTU-CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.7AI score0.00332EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2021/03/31 12:0 a.m.65 views

Debian DLA-2610-1 : linux-4.19 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-27170, CVE-2020-27171 Piotr Krysiuk discovered flaws in the BPF subsystem's checks for information leaks throu...

8.8CVSS8.1AI score0.02079EPSS
SaveExploits3References15
Amazon
Amazon
added 2021/03/20 12:0 a.m.81 views

Important: kernel

Issue Overview: An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be...

7.8CVSS7.2AI score0.02079EPSS
SaveExploits3
OSV
OSV
added 2021/03/10 4:15 p.m.5 views

CVE-2021-0369

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACTACROSSPROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS7.2AI score0.00143EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/10 4:15 p.m.15 views

Design/Logic Flaw

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACTACROSSPROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

4.4CVSS7.6AI score0.00143EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/10 3:53 p.m.26 views

CVE-2021-0369

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACTACROSSPROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.9AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/03/10 12:0 a.m.6 views

PT-2021-13048 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is caused by a logic error in the code of CrossProfileAppsServiceImpl.java, which can lead to an application's INTERACT ACROSS PROFILES grant state not displaying properly in the setting UI...

7.8CVSS7.7AI score0.00143EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.67 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0737-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits2References30
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.68 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0736-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits2References30
OSV
OSV
added 2021/03/09 3:10 p.m.10 views

SUSE-SU-2021:0740-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. - CVE-2021-26931: Fixed an issue where Linux kernel was treating gran...

7.8CVSS6.4AI score0.00544EPSS
SaveExploits2References22
OSV
OSV
added 2021/03/05 6:15 p.m.1 views

DEBIAN-CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

6.5CVSS6.2AI score0.00708EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/05 6:15 p.m.39 views

Design/Logic Flaw

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

4.9CVSS5.9AI score0.00708EPSS
SaveExploits0References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/03/05 6:15 p.m.5 views

CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

6.5CVSS6.1AI score0.00708EPSS
SaveExploits0References7
OSV
OSV
added 2021/03/05 6:15 p.m.3 views

UBUNTU-CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

6.5CVSS6.6AI score0.00708EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2021/03/05 12:0 a.m.26 views

CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

6.5AI score0.00708EPSS
SaveExploits0References6
NVD
NVD
added 2021/03/04 10:15 p.m.23 views

CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.4CVSS0.00259EPSS
SaveExploits0References2
Rows per page
Query Builder