Lucene search
+L

11336 matches found

osv_ubuntu
osv_ubuntu
•added 2021/03/09 6:15 p.m.•18 views

UBUNTU-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

7.8CVSS6.7AI score0.00321EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•11 views

CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

7.8CVSS6.7AI score0.00321EPSS
SaveExploits0References5
osv_oesa
osv_oesa
•added 2021/03/05 11:04 a.m.•20 views

OESA-2021-1078 xorg-x11-server security update

X.Org X11 X server. Security Fixes: A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

7.8CVSS6.6AI score0.00388EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2021/03/05 11:04 a.m.•17 views

OESA-2021-1065 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

6.5CVSS6.7AI score0.05029EPSS
SaveExploits1References3
NVD
NVD
•added 2021/03/04 10:15 p.m.•41 views

CVE-2021-25340

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

5.1CVSS0.00124EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/04 10:15 p.m.•31 views

Improper access control

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

2.1CVSS4.2AI score0.00124EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/04 10:15 p.m.•13 views

CVE-2021-25340

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

5.1CVSS4.9AI score0.00124EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•9 views

CVE-2021-25340: Improper Access Control

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

5.1CVSS5.9AI score0.00124EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/04 12:00 a.m.•25 views

Samsung keyboard security vulnerability

Samsung keyboard is a cell phone application from Samsung South Korea. It provides an input function. A security vulnerability exists in Samsung keyboard version prior to SMR Feb-2021 Release 1, which allows a close-range attacker to change arbitrary settings during the initialization state. No...

5.1CVSS5.8AI score0.00124EPSS
SaveExploits0References3
NVD
NVD
•added 2021/03/03 5:15 p.m.•30 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS0.00794EPSS
SaveExploits0References4
Mend
Mend
•added 2021/03/03 4:40 p.m.•5 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

8.6CVSS0.00794EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2021/03/03 4:40 p.m.•32 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS7.8AI score0.00794EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/03 12:00 a.m.•8 views

CVE-2020-25647: Out-of-bounds Write

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS6.7AI score0.00794EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2021/03/02 9:13 p.m.•30 views

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

7.6CVSS6.2AI score0.00794EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/03/02 7:23 p.m.•16 views

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

7.6CVSS6.2AI score0.00794EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/03/01 12:00 a.m.•4 views

PT-2021-2471

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed. No use...

4.4CVSS0.00129EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/03/01 12:00 a.m.•4 views

PT-2021-2500

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed. No...

4.4CVSS0.00129EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2021/02/26 3:15 a.m.•16 views

AZL-6924 CVE-2020-24455 affecting package tpm2-tss for versions less than 2.4.6-1

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.6AI score0.00584EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2021/02/26 3:15 a.m.•6 views

DEBIAN-CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.4AI score0.00584EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/26 3:15 a.m.•22 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS0.00584EPSS
SaveExploits0References5
Rows per page
Query Builder