Lucene search
+L

11336 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•5 views

CVE-2021-0120: Improper Initialization

Improper initialization in the installer for some IntelR Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS5.8AI score0.00227EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•2 views

PT-2021-12916

Name of the Vulnerable Software and Affected Versions: IntelR Graphics DCH Drivers for Windows 10 versions prior to 27.20.100.9316 Description: The issue is related to improper initialization in the installer for some IntelR Graphics DCH Drivers, which may allow an authenticated user to potential...

5.5CVSS0.00227EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•11 views

CVE-2021-0053: Improper Initialization

Improper initialization in firmware for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an authenticated user to potentially enable information disclosure via adjacent access...

5.7CVSS5.8AI score0.00343EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/11/16 6:15 p.m.•22 views

CVE-2021-26326

Failure to validate VMHSAVEPA during SNPINIT may result in a loss of memory integrity...

7.8CVSS7.1AI score0.00261EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•4 views

CVE-2021-26312: Improper Initialization

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•21 views

PT-2021-17004 · Amd · 1St Gen Amd Epyc™ +49

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns a potential "two time pad attack" due to the persistent platform private key not being protected with a random IV. This could lead to security risks, but specific...

7.5CVSS7.5AI score0.01046EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/11/15 12:00 a.m.•26 views

Cisco IOS LLDP DoS

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...

6.8CVSS6.5AI score0.01187EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/11/15 12:00 a.m.•27 views

Cisco IOS XE DoS

The vulnerability of the Protection Against Distributed Denial of Service attacks in Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.8CVSS7.5AI score0.01328EPSS
SaveExploits0References3Affected Software1
osv_uvi
osv_uvi
•added 2021/11/14 3:24 p.m.•52 views

UVI-2021-1002204 ice: check whether PTP is initialized in ice_ptp_release()

ice: check whether PTP is initialized in iceptprelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2021/11/14 3:24 p.m.•25 views

GSD-2021-1002204 ice: check whether PTP is initialized in ice_ptp_release()

ice: check whether PTP is initialized in iceptprelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

7.2AI score
SaveExploits0
osv_uvi
osv_uvi
•added 2021/11/14 3:21 p.m.•18 views

UVI-2021-1002135 ice: check whether PTP is initialized in ice_ptp_release()

ice: check whether PTP is initialized in iceptprelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•8 views

PT-2021-30600

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the initialization of PTP in the ice ptp release function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•8 views

PT-2021-26605

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns the initialization of PTP in the ice ptp release function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•5 views

PT-2021-30669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to the initialization of PTP in the ice ptp release function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•7 views

PT-2021-26674

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to the initialization of PTP in the ice ptp release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

5.8AI score
SaveExploits0References1
Prion
Prion
•added 2021/11/12 6:15 p.m.•51 views

Design/Logic Flaw

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using UUPSUpgradeable may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of @openzeppelin/contracts and...

7.5CVSS9.3AI score0.01487EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/11/12 6:15 p.m.•16 views

CVE-2021-41264

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using UUPSUpgradeable may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of @openzeppelin/contracts and...

9.8CVSS7.2AI score0.01487EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2021/11/12 6:16 a.m.•94 views

CVE-2021-30266

CVE-2021-30266 describes a use-after-free due to improper memory validation when initializing a new interface via the Interface add command in Qualcomm Snapdragon devices (multiple product families). Affected component is memory handling during interface initialization; impact is rated high for c...

6.7CVSS6.8AI score0.00176EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/12 12:00 a.m.•6 views

CVE-2021-41264: Improper Initialization

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using UUPSUpgradeable may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of @openzeppelin/contracts and...

9.8CVSS5.6AI score0.01487EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•27 views

Mozilla Firefox Security Advisory (MFSA2015-45) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.8CVSS8.1AI score0.0259EPSS
SaveExploits0References3
Rows per page
Query Builder