9267 matches found
kernel: memory leak in af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c
A flaw was found in the Afatech 9005 DVB-T receiver driver in the Linux kernel. An attacker, with physical access to the system, could cause the system to crash following a resource cleanup. The highest threat from this vulnerability is to system availability...
kernel: out-of-bounds write in ext4_xattr_set_entry in fs/ext4/xattr.c
An out-of-bounds write flaw was found in the Linux kernel’s Ext4 FileSystem in the way it uses a crafted ext4 image. This flaw allows a local user with physical access to crash the system or potentially escalate their privileges on the system...
Apple macOS Catalina Logic Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.5, which stems from the ability of someone with physical access to the Mac to bypass the login window. No details of th...
CVE-2020-28044
An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions...
Code injection
An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions...
HPESBHF04002 rev.2 - HPE Proliant Gen10 Servers using Intel Innovation Engine, Physical Access to the Server Could Result in Execution of Unauthenticated Innovation Engine Firmware Leading to a Local Denial of Service
Potential Security Impact: Local: Denial of Service DoS, Unauthorized Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System all current IE firmware HPE Apollo 4200 Gen10 Server all current IE firmware HPE Apollo 4500 System all current IE firmware H...
CVE-2020-28044
The CVE-2020-28044 entry applies to a PAX Point Of Sale device running ProlinOS up to 2.4.161.8859R. With physical access, an attacker can boot the device into management mode, enable the XCB service, and gain MAINAPP-privileged access to list, read, create, and overwrite files. The description d...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 8.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
...
CVE-2020-27670
A flaw was found in Xen in the AMD IOMMU page table updates. This flaw allows a malicious guest to cause a denial of service, host data corruption, or potential privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
CVE-2020-27671
A flaw was found to occur in the Xen optimization to coalesce per-page IOMMU TLB flushes. This flaw allows malicious x86 HVM and PVH guests to cause host data corruption and data leaks, resulting in a denial of service DoS or potential privilege escalation. The highest threat from this...
CVE-2019-14716
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...
CVE-2019-14716
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...
Code injection
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...
Design/Logic Flaw
Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation...
CVE-2019-14715
Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation...
CVE-2019-14715
CVE-2019-14715 affects Verifone Pinpad Payment Terminals. The root cause is an undocumented physical access path via an SBI bootloader memory write operation, enabling local access that can impact confidentiality, integrity, and availability as reflected by CVSS metrics (CVSSv3.1: AV=Physical, AC...
CVE-2019-14716
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...
CVE-2019-14716
CVE-2019-14716 affects Verifone VerixV Pinpad terminals with QT000530, where an undocumented physical access mode (VerixV shell.out) exists. The vulnerability is triggered via physical access and is described with local access ( ) and low attack complexity; CVSS v3.1 vectors indicate PHYSICAL acc...
