5069 matches found
CVE-2019-3820
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...
CVE-2019-3820
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...
CVE-2019-3820
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...
CVE-2019-3820
A vulnerability was found where the gnome-shell lock screen, since version 3.15.91, does not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts and potentially other actions. This vulnerability was fixed in...
Marvell Avastar wireless SoCs have multiple vulnerabilities
Overview Some Marvell Avastar wireless system on chip SoC models have multiple vulnerabilities, including a block pool overflow during Wi-Fi network scan. Description A presentation at the ZeroNights 2018 conference describes multiple security issues with Marvell Avastar SoCs models 88W8787,...
PT-2019-16738 · Gnome +7 · Gnome Shell +7
Name of the Vulnerable Software and Affected Versions: gnome-shell versions 3.15.91 and later Description: The gnome-shell lock screen does not properly restrict all contextual actions, allowing an attacker with physical access to a locked workstation to invoke certain keyboard shortcuts and...
Self-Encrypting Drive Vulnerabilities - US
Lenovo Security Advisory: LEN-25256 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12037, CVE-2018-12038, CVE-2019-10636, CVE-2019-10705, CVE-2019-10706, CVE-2019-11686 Summary Description: As reported in CERT Coordination Center...
Code injection
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...
CVE-2018-19009
CVE-2018-19009 affects Pilz PNOZmulti Configurator (all versions prior to 10.9). The vulnerability stems from clear-text storage of credentials, enabling an authenticated local attacker to view sensitive PMI m107 diag HMI credentials and, with physical access, potentially modify data on that HMI....
CVE-2018-19009
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...
CVE-2019-2541
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...
UBUNTU-CVE-2019-2503
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical...
System x Secure Boot Vulnerability - Lenovo Support US
No description provided...
System x Secure Boot Vulnerability - US
Lenovo Security Advisory: LEN-20241 Potential Impact: Booting unauthenticated code Severity: High Scope of Impact: Lenovo-only CVE Identifier: CVE-2017-3775 Summary Description: Lenovo internal testing discovered some System x server BIOS/UEFI versions that, when Secure Boot mode is enabled by a...
Input validation
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2017-3718
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2017-3718
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2017-3718
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
Firmware Authentication Bypass - US
Lenovo Security Advisory: LEN-23849 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: Intel has reported a potential security vulnerability allowing an attacker with physical access to bypass firmware authentication...