Zigor Corporación ZGR TPS200 NG 安全漏洞

The Zigor Corporación ZGR TPS200 NG is a rectifier for battery chargers from the Spanish company Zigor Corporación. Capable of managing sealed lead-acid or lithium batteries for industrial applications, remote control for substations and remote control of cellular phones, as well as applications...

CVE-2022-41581

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2022-41580

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46840

The HWKEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46839

The HWKEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

CVE-2021-46839

The HWKEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...

PT-2022-12939 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a missing bounds check on length in the HW KEYMASTER module. This could potentially allow for the malicious construction of data, leading to out-of-bounds acces...

DEBIAN-CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

PT-2022-6662 · Ampere +4 · Ampereone +4

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified AmpereOne hardware affected versions not specified Description: A known cache speculation issue, similar to Spectre v2, allows malicious code to influence mispredicted branches within a victim's hardware...

hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)

A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

Security Bulletin: Vulnerability in IBM SDK, Java Technology (CVE-2021-41041) affects Power HMC

Summary IBM Java is used by IBM Power Hardware Management Console HMC for running java applications and services. This bulletin provides a remediation for the impacted vulnerabilities, CVE-2021-41041 by upgrading IBM Power Hardware Management Console HMC respective PTF and thus addressing the...

Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts

GitHub has put out an advisory detailing what may be an ongoing phishing campaign targeting its users to steal credentials and two-factor authentication 2FA codes by impersonating the CircleCI DevOps platform. The Microsoft-owned code hosting service said it learned of the attack on September 16,...

The vulnerability of the QEMU hardware emulation software, related to the provision of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a system failure...

The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation engine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a perpetrator to trigger a service failure...

The vulnerability of the QEMU hardware emulation software lies in the fact that resources are not released after their useful lifespan has ended. This allows attackers to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the QEMU hardware emulation software, related to the issue of writing operations beyond the buffer boundaries in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Security Bulletin: This Power System update is being released to address CVE 2022-0778

Summary POWER9: In response to a security issue with network connections, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2022-0778. Vulnerability Details CVEID:CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of...

openssl-ibmca bug fix update

An update is available for openssl-ibmca. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The openssl-ibmca package provides a dynamic OpenSSL engine for the IBM...