6348 matches found
Huawei E6878-370 Improper Authorization Vulnerability
The Huawei E6878-370 is a portable 5G router from Huawei China. A security vulnerability exists in Huawei E6878-370 version 10.0.3.1 H563SP1C00 and version 10.0.3.1 H563SP21C233, which stems from the device failing to properly restrict certain data received on the WAN port. An attacker could...
Mac Users Targeted by Spyware Spreading via Xcode Projects
A campaign aimed at Mac users is spreading the XCSSET suite of malware, which has the capability to hijack the Safari web browser and inject various JavaScript payloads that can steal passwords, financial data and personal information, deploy ransomware and more. Infections are propagating via...
CVE-2020-8720
Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access...
CVE-2020-8723
Cross-site scripting for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-8731
Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8731
Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8729
Buffer copy without checking size of input for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8718
Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8709
Improper authentication in socket services for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-8712
Buffer overflow in a verification process for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8716
Improper access control for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2020-8714
Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8721
Improper input validation for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8709
Improper authentication in socket services for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-8710
Buffer overflow in the bootloader for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8706
Buffer overflow in a daemon for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-8720
CVE-2020-8720: Buffer overflow in the subsystem of Intel® Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to cause a denial of service via local access. Affected products include Intel® Server Boards S2600WT, S2600CW, S2600KP/TP families, S1200SP ...
CVE-2020-8714
The CVE-2020-8714 entry corresponds to an Intel advisory issue for Intel® Server Boards, Server Systems and Compute Modules, describing an improper authentication vulnerability that before firmware version 1.59 could permit an authenticated user to potentially escalate privileges via local access...
CVE-2020-8716
CVE-2020-8716 pertains to Intel® Server Boards, Server Systems and Compute Modules prior to firmware version 1.59, where improper access control could allow an authenticated local user to potentially cause a denial of service. The Intel advisory (Intel SA-00384) lists multiple related CVEs and up...
CVE-2020-8715
CVE-2020-8715 affects Intel® Server Boards, Server Systems and Compute Modules prior to version 1.59. An invalid pointer may allow an unauthenticated user to cause denial of service via local access. Intel advisory INTEL-SA-00384 documents this family, providing firmware updates to mitigate (upda...