9261 matches found
EulerOS Virtualization for ARM 64 3.0.5.0 : libgcrypt (EulerOS-SA-2020-1085)
According to the versions of the libgcrypt package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected:...
EulerOS Virtualization for ARM 64 3.0.5.0 : xorg-x11-server (EulerOS-SA-2020-1062)
According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An incorrect permission check for -modulepath and -logfile options when starting Xorg X server allows...
CVE-2019-20348
OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...
CVE-2019-20348
OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...
Design/Logic Flaw
OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...
CVE-2019-20348
OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...
CVE-2019-20348
CVE-2019-20348 affects OKER G232V1 devices (v1.03.02.20161129) where the boot UART serial interface exposes a root shell due to improper access control. The vulnerability allows an attacker with physical access to interrupt the boot sequence and execute arbitrary commands with root privileges, en...
Mailbox Master Keys
Here's a physical-world example of why master keys are a bad idea. It's a video of two postal thieves using a master key to open apartment building mailboxes. Changing the master key for physical mailboxes is a logistical nightmare, which is why this problem won't be fixed anytime soon...
Release of New CISA Insights on Increased Geopolitical Tensions and Threats
Stakeholders, Today, the Cybersecurity and Infrastructure Security Agency CISA issued a CISA Insights document entitled, “Increased Geopolitical Tensions and Threats” pertaining to the increased tension with Iran. You can read the new CISA Insights at CISA.gov/insights. As the Nation’s risk...
Google Android Framework Component Multiple Security Vulnerabilities
Description Google Android is prone to the following security vulnerabilities: 1. Multiple privilege-escalation vulnerabilities 2. A denial-of-service vulnerability An attacker can exploit these issues to gain elevated privileges, and cause denial-of-service conditions. These issues are being...
How the US Prepares Its Embassies for Potential Attacks
In addition to securing physical structures, the Diplomatic Security Service runs simulations of protests in a model city in Virginia...
CVE-2019-19319
An out-of-bounds write flaw was found in the Linux kernel’s Ext4 FileSystem in the way it uses a crafted ext4 image. This flaw allows a local user with physical access to crash the system or potentially escalate their privileges on the system. Mitigation Mitigation for this issue is either not...
DEBIAN-CVE-2019-19965
In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5...
UBUNTU-CVE-2019-19965
In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5...
CVE-2017-16778
An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency DTMF tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an...
Design/Logic Flaw
An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency DTMF tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an...
CVE-2017-16778
CVE-2017-16778 describes an access-control weakness in the DTMF tone receiver of the Fermax Outdoor Panel. Due to incorrect access-control logic, an attacker could inject a DTMF tone via the speaker unit to trigger an access grant and gain unauthorized physical access to a restricted floor/level....
CVE-2017-16778
An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency DTMF tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an...
CVE-2019-18809
A flaw was found in the Afatech 9005 DVB-T receiver driver in the Linux kernel. An attacker, with physical access to the system, could cause the system to crash following a resource cleanup. The highest threat from this vulnerability is to system availability. Mitigation In order to mitigate this...