8252 matches found
The vulnerability of the QEMU hardware emulation software, related to pointer swapping errors, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...
PT-2022-11139 · Unknown · Hw Keymaster
Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The HW KEYMASTER module lacks a validity check of the key format, which may result in out-of-bounds memory access if successfully exploited. Recommendations: At the moment, there is no...
[SECURITY] Fedora 36 Update: moby-engine-20.10.18-1.fc36
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...
HPESBHF04365 rev.1 - HPE Integrated Lights-Out 5 (iLO 5), Multiple Local Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution, Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to 2.72 HPE Apollo 2000 Gen10 Plus System - Prior to 2.72 HP...
The vulnerability of QEMU’s emulation of USB devices allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of QEMU’s emulation of hardware devices involves an incorrect pointer being freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the QEMU hardware emulation software, related to access to an uninitialized pointer, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to access to an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to cause a system failure...
hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)
A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
kernel: race condition in perf_event_open leads to privilege escalation
A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, and potentially other vendors/devices due to code reuse, the /SysInfo.htm URI does not require a session ID. This web page calls a showsysinfo function which retrieves WPA passwords, SSIDs, MAC Addresses, serial numbers, WPS...
The vulnerability of the QEMU hardware emulation software, related to the execution of operations beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.
The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the eepro100 i8255x hardware emulation software by QEMU allows a hacker to induce a service failure.
The vulnerability of the eepro100 i8255x hardware emulation software by QEMU is related to an uncontrolled recursion. Exploiting this vulnerability could allow a perpetrator to cause a system failure...
CVE-2022-38399
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection...
CVE-2022-38399
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection...
CVE-2022-38399
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection...
Levels of Assurance for DoD Microelectronics
The NSA has has published criteria for evaluating levels of assurance required for DoD microelectronics. The introductory report in a DoD microelectronics series outlines the process for determining levels of hardware assurance for systems and custom microelectronic components, which include...
Ubuntu: Security Advisory (USN-4163-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
A Door Isn’t a Door When It’s Ajar - Part 3
A Door Isn’t a Door When It’s Ajar - Part III By Trellix · August 25, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Installing OnGuard by Third Party Vendor Exploitation and Hacking the Planet! Putting it all Together Building the Final Demo System The Demo Lessons and...
A Door Isn’t a Door When It’s Ajar - Part 3
A Door Isn’t a Door When It’s Ajar - Part III By Trellix · August 25, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Installing OnGuard by Third Party Vendor Exploitation and Hacking the Planet! Putting it all Together Building the Final Demo System The Demo Lessons and...
The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...
Driver Disk for Qlogic fastlinq 8.70.10.0 - For Citrix Hypervisor 8.2 LTSR
Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's fastlinq driver and wish to use the latest version of the following: Driver Module| Version ---|--- qed| 8.70.10.0 qede| 8.70.10.0 qedf| 8.70.10.0 qedi| 8.70.10.0 qedr|...