8255 matches found
CVE-2022-42280
NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass...
Over 100 Siemens PLC Models Found Vulnerable to Firmware Takeover
Security researchers have disclosed multiple architectural vulnerabilities in Siemens SIMATIC and SIPLUS S7-1500 programmable logic controllers PLCs that could be exploited by a malicious actor to stealthily install firmware on affected devices and take control of them. Discovered by Red Balloon...
kernel: netfilter: flowtable: fix stuck flows on cleanup due to pending work
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens in order: 1 gcstep work is stopped to disable any further stats/del requests...
kernel security and bug fix update
An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...
CVE-2022-38773
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary cod...
Siemens S7-1500 CPU devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Moderate: grub2 security update
The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: Buffer...
CVE-2021-46867
The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...
CVE-2022-47976
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections...
CVE-2022-47976
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections...
Microsoft Reveals Tactics Used by 4 Ransomware Families Targeting macOS
Microsoft has shed light on four different ransomware families – KeRanger, FileCoder, MacRansom, and EvilQuest – that are known to impact Apple macOS systems. "While these malware families are old, they exemplify the range of capabilities and malicious behavior possible on the platform," the tech...
PT-2023-12593 · Unknown · Hw Keymaster
Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a problem in the HW KEYMASTER module with releasing memory. Successful exploitation may result in out-of-bounds memory access. Recommendations: At the moment,...
CVE-2022-47976
The CVE-2022-47976 issue affects the DMSDP module of Huawei’s distributed hardware stack (Huawei EMUI/HarmonyOS). The vulnerability arises from an overriding control connection in DMSDP, which could allow imposter control connections and may lead to denial of service by disconnecting normal servi...
PT-2023-12594 · Unknown · Hw Keymaster
Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a problem in the HW KEYMASTER module with releasing memory. Successful exploitation may result in out-of-bounds memory access. Recommendations: At the moment,...
HUAWEI EMUI/Magic UI 缓冲区错误漏洞
Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from the HWKEYMASTER module...
Driver Disk for Qlogic netxtreme2 7.15.10 - For Citrix Hypervisor 8.2 LTSR
Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's netxtreme2 driver and wish to use the latest version of the following: Driver Module| Version ---|--- netxtreme2| 7.15.10 bnx2x| 1.715.20 bnx2fc| 2.12.20 Note: If you us...
PT-2025-54056
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to block management queues blk-mq. Specifically, a tag leak can occur when the number of hardware queues is reduced. The issue arises because ta...
K11186236: Linux kernel KVM subsystem vulnerability CVE-2019-6974
Security Advisory Description In the Linux kernel before 4.20.8, kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandles reference counting because of a race condition, leading to a use-after-free. CVE-2019-6974 Impact BIG-IP An attacker may use this vulnerability to cause a vCMP guest to crash,...
K64571774: BIG-IP virtual server TCP sequence numbers vulnerability CVE-2020-5947
Security Advisory Description On specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. CVE-2020-5947 Impact Attackers may be able to spoof TCP packet...
