6822 matches found
p11-kit -- Multiple vulnerabilities
The p11-glue project reports: CVE-2020-29363: Out-of-bounds write in p11rpcbuffergetbytearrayvalue functionA heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in...
Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2019-3128)
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Microsoft Azure SDK Security Vulnerability
Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Microsoft Azure SDK. The following products and versions are affected:Azure SDK for Java...
Vulnerabilities fixed in Microsoft Azure
Vulnerabilities have been fixed in Azure. The vulnerabilities allow a malicious person to bypass security measures. Azure Sphere: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |. |----------------|------|-------------------------------------| |...
Microsoft Azure SDK Security Vulnerability
Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Azure SDK for C. There is no information about this vulnerability at this time, so please stay tuned to CNNVD or vendor announcements. The...
Payment Card Skimmer Group Using Raccoon Info-Stealer to Siphon Off Data
A cybercrime group known for targeting e-commerce websites unleashed a "multi-stage malicious campaign" earlier this year designed with an intent to distribute information stealers and JavaScript-based payment skimmers. In a new report published today and shared with The Hacker News,...
Moddable SDK OS Code Issue Vulnerability
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in versions of Moddable SDK prior to OS200908, which results in a denial of service SEGV due to xObjectBindingFromExpression at...
The vulnerability of the built-in software in Intel NUC Kits is related to improper handling of resolutions, allowing attackers to increase their privileges.
The vulnerability in the built-in software of the Intel NUC Kit is related to incorrect handling of resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability in the built-in software of the Intel NUC Kit relates to incorrect resource initialization, allowing attackers to exploit their privileges.
The vulnerability of the built-in software in the Intel NUC Kit is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory, allowing an attacker to exploit their privileges.
The vulnerability of the built-in software in the Intel NUC Kit relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2020-5853 · P11 Kit +7 · P11-Kit +7
Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.23.6 through 0.23.21 Description: A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array i...
DEBIAN-CVE-2019-14563
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
IoT security: how Microsoft protects Azure Datacenters
Azure Sphere first entered the IoT Security market in 2018 with a clear mission—to empower every organization on the planet to connect and create secure and trustworthy IoT devices. Security is the foundation for durable innovation and business resilience. Every industry investing in IoT must...
DEBIAN-CVE-2019-14559
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...
UBUNTU-CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2020-66301)
The Intel NUC Kit is a small desktop computer from Intel Corporation USA. IntelR NUCs suffers from a buffer overflow vulnerability that stems from an improper buffer restriction could allow a privileged user to potentially enable privileged escalation via local access. No detailed vulnerability...
CVE-2020-12354
Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Command execution vulnerability exists in MyuCMS (CNVD-2020-67559)
MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. A command execution vulnerability exists in MyuCMS, which can be exploited to gain server privileges...
Command execution vulnerability exists in MyuCMS (CNVD-2020-67557)
MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. MyuCMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...
