5205 matches found
CVE-2022-4543
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...
UBUNTU-CVE-2022-4543
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...
CVE-2022-4543
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...
AZL-12951 CVE-2022-2196 affecting package kernel for versions less than 5.15.102.1-1
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM L0 advertising eIBRS support to L1. An attacker at L2 with code...
Delta 4G Router DX-3021
1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor : Delta Industrial Automation Equipment: 4G Router DX-3021 Vulnerabilities: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated user to...
CVE-2022-4543
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. Mitigation Mitigation for this issue is either not available or the currently available...
PT-2022-6067
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timi...
Introducing PEACH, a tenant isolation framework for cloud applications
A step-by-step framework for modeling and improving SaaS and PaaS tenant isolation by reducing your cloud applications’ attack surface...
ICONICS and Mitsubishi Electric Products
1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low attack complexity Vendor: ICONICS, Mitsubishi Electric Equipment: ICONICS Product Suite Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write arbitrary files. 3. TECHNICAL...
The vulnerability of the FortiIsolator browser isolation platform, related to inadequate access control, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the FortiIsolator browser isolation platform is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information by generating a certificate again through a specially created URL address...
Rockwell Automation Logix controllers
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: CompactLogix, Compact GuardLogix, ControlLogix, and GuardLogix controllers Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this...
Capsule Console 安全漏洞
Capsule Console is a web interface for Capsule8 from Capsule USA, Inc. for event management, sensor configuration, and system analysis. A security vulnerability exists in versions of Capsule prior to 0.1.3, which stems from the fact that an attacker can detach namespaces from tenants that are...
Horner Automation Remote Compact Controller
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Horner Automation Equipment: Remote Compact Controller RCC 972 Vulnerabilities: Inadequate Encryption Strength, Use of Hard-coded Cryptographic Key, Excessive Reliance on Global Variables 2. RISK...
The vulnerability in the isolated iframe environment of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows attackers to perform spoofing attacks.
The vulnerability in the isolated environment of Firefox browsers, Mozilla Firefox, Firefox ESR, and Thunderbird’s email client is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
Successful Hack of Time-Triggered Ethernet
Time-triggered Ethernet TTE is used in spacecraft, basically to use the same hardware to process traffic with different timing and criticality. Researchers have defeated it: On Tuesday, researchers published findings that, for the first time, break TTEs isolation guarantees. The result is PCspooF...
The vulnerability of the CNG Key Isolation service in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the CNG Key Isolation service in the Windows operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2022-3931
A flaw was found in Ceph-Rook. An attacker with root capabilities can escape the cgroup isolation and gain access to unauthorized information. This issue impacts confidentiality, integrity, and availability...
CVE-2022-41125
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...
