296 matches found
singularity
Singularity of Origin Actualizaciones recientes: NUEVO 2025-11-25 : Chrome lanzó la versión 142 con Local Network Access LNA, que impide las técnicas de ataque de DNS rebinding implementadas en Singularity. La rama LNA-from-Non-Secure-Contexts de Singularity of Origin implementa soporte para Tria...
EUVD-2026-94643
AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source...
CVE-2026-25267
Memory corruption when non-secure loader rewrites page tables before secure memory initialization...
CVE-2026-25267 Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization...
CVE-2026-25267
A memory corruption vulnerability exists in the Core component due to a non-secure loader rewriting page tables before the secure memory initialization process begins. This flaw, categorized under CWE-862 (Missing Authorization) , could result in high impacts on confidentiality, integrity, and av...
CVE-2026-25267 Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization...
CVE-2026-25267: Missing Authorization
Memory corruption when non-secure loader rewrites page tables before secure memory initialization...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, if the IMA appraisal method is used with the “imaappraiselog” boot parameter, lockdown can be circumvented using kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents the “imaappraiselog” parameter from being set during boot, but this does not cover...
CVE-2026-102709
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...
CVE-2026-102709
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...
CVE-2026-102709
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...
EUVD-2026-89172
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...
CVE-2026-102709
An improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware fails to verify these pointers before dereferencing them, leading to unintended...
CVE-2026-102709: Exposure of Sensitive Information to an Unauthorized Actor
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...
nanoid: nanoid: Denial of Service via negative size input in non-secure module functions
A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...
CVE-2026-28324
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...
EUVD-2026-84807
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...
EUVD-2026-66233
On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...
DoS (Denial of Service) nanoid Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2026-67214 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:...