Trend Micro, Inc. Home Network Security tdts.ko chrdev_ioctl_handle privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the tdts.ko chrdevioctlhandle functionality of Trend Micro, Inc. Home Network Security 6.1.567. A specially crafted ioctl can lead to increased privileges. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Trend...

Trend Micro Inc. Home Network Security SFTP log collection server hard-coded password vulnerability

Summary A hard-coded password vulnerability exists in the SFTP Log Collection Server function of Trend Micro Inc.’s Home Network Security 6.1.567. A specially crafted network request can lead to arbitrary authentication. An attacker can send an unauthenticated message to trigger this vulnerabilit...

PT-2021-19712

Name of the Vulnerable Software and Affected Versions: Trend Micro Maximum Security version 17 Description: The issue is related to an improper access control vulnerability in the installer, which could allow a local attacker to escalate privileges on a target machine. The attacker must already...

Trend Micro Maximum Security Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Maximum Security 安全漏洞

Trend Micro Maximum Security is a suite of computer security software from Trend Micro, Inc. The software includes virus detection, malware protection, and authentication protection.A security vulnerability exists in Trend Micro Maximum Security, which stems from incorrect default permissions in...

CVE-2020-27209

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...

CVE-2020-27209

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...

CVE-2020-27209

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...

Code injection

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...

CVE-2020-27209

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...

CVE-2020-27209

CVE-2020-27209 affects the micro-ecc library (v1.0) ECDSA; the ECDSA operation is vulnerable to simple power analysis, enabling an attacker to extract the private ECC key. Consequences: Confidentiality impact (private key exposure) as documented. No remediation specifics (patch/version) are provi...

PT-2021-11314

Name of the Vulnerable Software and Affected Versions: micro-ecc library version 1.0 Description: The ECDSA operation of the micro-ecc library is susceptible to simple power analysis attacks. This allows an adversary to extract the private ECC key. Recommendations: For micro-ecc library version...

micro-ecc 安全漏洞

micro-ecc is a software application. Small and fast ECDH and ECDSA implementations for 8-bit, 32-bit and 64-bit processors. A security vulnerability exists in micro-ecc library 1.0 that stems from the vulnerability of ECDSA operations to a simple power analysis attack that allows an attacker to...

CVE-2020-27209: Undefined Security Weakness

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...

Fedora: Security Advisory for dotnet5.0 (FEDORA-2021-d551431950)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

ZDI Tops Omdia Vulnerability Disclosures Again

The Trend Micro Zero Day Initiative ZDI again dominated the number of disclosed vulnerabilities for the 13th year in a row based on Omdia’s research into the vulnerability disclosure market. Read More...

[SECURITY] Fedora 32 Update: dotnet5.0-5.0.203-1.fc32

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 34 Update: dotnet5.0-5.0.203-1.fc34

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

PT-2024-11190 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the iommu/amd component. The issue occurs when switching a device between IOMMU and direct DMA through sysfs, which doe...

CVE-2021-28649

An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a...