8494 matches found
CVE-2019-5648 LDAP Credential Exposure in Barracuda Load Balancer ADC
Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...
The vulnerability of the software update function of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to load any file onto a vulnerable device.
The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s software update function NFVIS is related to errors during file signature verification. Exploiting this vulnerability could allow an attacker to load any desired file onto a vulnerable device...
Intel(R) Graphics Driver Load Value Injection (LVI) Vulnerability
IntelR Graphics Driver is a graphics card driver from Intel. A security vulnerability exists in IntelR Graphics Driver. An attacker could exploit the vulnerability to potentially enable denial of service via local access...
High-Severity Flaws Plague Intel Graphics Drivers
Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...
Exploit for CVE-2020-0551
PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0...
UBUNTU-CVE-2020-0551
Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334:...
CVE-2020-0551
Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334:...
LVI Attacks: New Intel CPU Vulnerability Puts Data Centers At Risk
It appears there is no end in sight to the hardware level security vulnerabilities in Intel processors, as well as to the endless 'performance killing' patches that resolve them. Modern Intel CPUs have now been found vulnerable to a new attack that involves reversely exploiting Meltdown-type data...
LVI Attacks: New Intel CPU Vulnerability Puts Data Centers At Risk
It appears there is no end in sight to the hardware level security vulnerabilities in Intel processors, as well as to the endless 'performance killing' patches that resolve them. Modern Intel CPUs have now been found vulnerable to a new attack that involves reversely exploiting Meltdown-type data...
PT-2020-4013 · Intel · Intel Processors +1
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue concerns a load value injection in some IntelR Processors utilizing speculative execution, which may allow an authenticated user to potentially enable information...
Intel Releases Security Updates
Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...
AMD Downplays CPU Threat Opening Chips to Data Leak Attacks
AMD is seeking to downplay side-channel attacks that can leak potentially sensitive data from its processors released between 2011 and 2019. The “Take A Way” attack, so-called by researchers with the Graz University of Technology in a new analysis this weekend, is a side-channel attack...
AMD Downplays CPU Threat Opening Chips to Data Leak Attacks
AMD is seeking to downplay side-channel attacks that can leak potentially sensitive data from its processors released between 2011 and 2019. The “Take A Way” attack, so-called by researchers with the Graz University of Technology in a new analysis this weekend, is a side-channel attack...
9 Years of AMD Processors Vulnerable to 2 New Side-Channel Attacks
AMD processors from as early as 2011 to 2019 carry previously undisclosed vulnerabilities that open them to two new different side-channel attacks, according to a freshly published research. Known as "Take A Way," the new potential attack vectors leverage the L1 data L1D cache way predictor in...
PyYAML Input Validation Error Vulnerability
PyYAML is a Python based YAML parser and generator . There is an input validation error vulnerability in PyYAML, when the user loads a yaml file that the program does not trust through the fullload method or Fullloader method, it is easy to cause arbitrary code execution vulnerability, which can ...
Intel SGX and Processor Side Channel Data Leakage Vulnerabilities - Lenovo Support US
No description provided...
Intel SGX and Processor Side Channel Data Leakage Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-30553 Potential Impact: Information disclosure, escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0551, CVE-2020-0561 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that m...
Security Bulletin: IBM® Db2® is vulnerable to information disclosure (CVE-2019-4524)
Summary Db2 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users, after running LOAD or UPDATE ALERT CFG through the ADMINCMD stored procedure. Vulnerability Details CVEID: CVE-2019-4524 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes...