Lucene search
+L

11336 matches found

BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•18 views

Titan M Security Module Unauthorized Access

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.4CVSS5.5AI score0.00129EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•16 views

Titan M Security Module Unauthorized Access

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.4CVSS5.5AI score0.00129EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•21 views

NETGEAR EX7700 insecure resource initialization Unauthorized Access

The vulnerability of NETGEAR EX7700 Wi-Fi network repeater software’s microprogramming system is related to an insecure resource initialization process. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00533EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/06 12:00 a.m.•7 views

CVE-2021-28688: Improper Initialization

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.4AI score0.0034EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•31 views

Titan M Security Module Unauthorized Access

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00129EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/04/03 1:16 p.m.•113 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.27 and fixes at least the following security issues: The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain...

7.8CVSS6.5AI score0.00805EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2021/04/02 6:15 p.m.•17 views

CVE-2021-1780

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack...

4.4CVSS5.8AI score0.00259EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/02 6:15 p.m.•9 views

CVE-2021-1780

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack...

4.9CVSS5.4AI score0.00259EPSS
SaveExploits0References2
CVE
CVE
•added 2021/04/02 5:58 p.m.•103 views

CVE-2021-1780

CVE-2021-1780 is a memory initialization issue in Bluetooth on Apple devices, addressed in iOS 14.4 and iPadOS 14.4. The vulnerability allows a privileged attacker to cause a denial of service via memory handling weaknesses, as described in the NVD entry and Apple’s HT212146 documentation. The is...

4.9CVSS4.5AI score0.00259EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/02 12:00 a.m.•4 views

CVE-2021-1780: Improper Initialization

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack...

4.9CVSS5.7AI score0.00259EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/04/01 6:23 p.m.•27 views

Denial Of Service(DoS)

Xen is vulnerable to a denial of service, caused by the failure to call the initialization function by the "soft reset" feature. By initializing a "soft reboot", a local attacker could exploit this vulnerability to crash the process monitoring the guest...

5.5CVSS3.3AI score0.00314EPSS
SaveExploits0References4Affected Software1
Microsoft CVE
Microsoft CVE
•added 2021/04/01 7:00 a.m.•30 views

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

...

4.5CVSS8.8AI score0.00225EPSS
SaveExploits0
Citrix
Citrix
•added 2021/04/01 12:00 a.m.•18 views

".NET Framework Initialization Error" on Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If a computer has .NET Framework version 4 installed and there are no older versions of the .NET...

7AI score
SaveExploits0
NVD
NVD
•added 2021/03/26 9:15 p.m.•28 views

CVE-2020-25578

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the doff field of the dirent structures returned by VOPREADDIR. In particular, tmpfs5, smbfs5, autofs5...

5.3CVSS0.02315EPSS
SaveExploits2References2
Prion
Prion
•added 2021/03/26 9:15 p.m.•30 views

Design/Logic Flaw

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs5 was failing to zero-fill a pair of padding fields in the dirent structure, resulting in a leak of three uninitialized bytes...

5CVSS5.1AI score0.01117EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2021/03/26 9:15 p.m.•25 views

Design/Logic Flaw

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the doff field of the dirent structures returned by VOPREADDIR. In particular, tmpfs5, smbfs5, autofs5...

5CVSS5.1AI score0.02315EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2021/03/26 8:44 p.m.•116 views

CVE-2020-25578

CVE-2020-25578 affects FreeBSD: several file systems (tmpfs(5), smbfs(5), autofs(5), mqueuefs(5)) did not properly initialize the d_off field in dirent structures returned by VOP_READDIR. The underlying issue can leak eight uninitialized kernel stack bytes to userspace. The FreeBSD advisory (Free...

5.3CVSS6.1AI score0.02315EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2021/03/26 5:15 p.m.•50 views

CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process...

4.5CVSS0.00225EPSS
SaveExploits0References3
Prion
Prion
•added 2021/03/26 5:15 p.m.•33 views

Race condition

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process...

4.4CVSS5.1AI score0.00225EPSS
SaveExploits0References3Affected Software2
Mend
Mend
•added 2021/03/26 4:45 p.m.•5 views

CVE-2020-35508

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process...

4.5CVSS0.00225EPSS
SaveExploits0References11
Rows per page
Query Builder