Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability

A vulnerability in the VLAN Trunking Protocol VTP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an affected device and cause a denial of service DoS condition. The vulnerability is due to a logic...

Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability

A vulnerability in the MACsec Key Agreement MKA using Extensible Authentication Protocol-Transport Layer Security EAP-TLS functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic through a Layer 3 interface of an affected...

PT-2018-2100

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the VLAN Trunking Protocol VTP subsystem could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an...

PT-2018-1611

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue is related to a logic error in the MACsec Key Agreement MKA functionality of Cisco IOS XE Software, specifically when using Extensible Authentication Protocol-Transport Layer...

Authentication flaw

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypas...

CVE-2018-12169

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypas...

CVE-2018-12169

Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypas...

CVE-2018-12169

CVE-2018-12169 is described in Lenovo PS/LEN advisory as part of Intel Boot Guard verification flaws. The platform sample firmware supplied by Intel, incorporated by Lenovo across multiple products, contains a logic error that may cause it to scan for and execute code in a region that should not ...

PT-2018-11044

Name of the Vulnerable Software and Affected Versions Intel Core Processor firmware versions in 4th Generation through 8th Generation Description The issue is related to a logic error in the platform sample code firmware, which may allow a physical attacker to bypass firmware authentication...

Design/Logic Flaw

The function MP4Free in mp4property.cpp in libmp4v2 2.1.0 internally calls free on a invalid pointer, raising a SIGABRT signal...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

Null pointer dereference

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

CVE-2017-2632

A logic error in validrole in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges...

CVE-2017-2632

A logic error in validrole in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges...

PT-2018-7149

Name of the Vulnerable Software and Affected Versions: CloudForms versions prior to 5.7.1.3 Description: A logic error in the valid role function in CloudForms role validation could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should...

PT-2018-12336

Name of the Vulnerable Software and Affected Versions Virgo ZodiacToken affected versions not specified Description An issue was discovered in the smart contract implementation for Virgo ZodiacToken, an Ethereum token. The issue arises from the line bool sufficientAllowance = allowance = allows f...

Firmware Authentication Bypass

Summary: Potential security vulnerability allowing bypass of firmware authentication and incorrect TPM measurement of system firmware. Description: Platform sample code firmware included with 4th Gen Intel® Core™ Processor Haswell, 5th Gen Intel® Core™ Processor Broadwell, 6th Gen Intel® Core™...

CVE-2017-5401

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...