760 matches found
Ubuntu: Security Advisory (USN-3580-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-26373
A flaw was found in hw. In certain processors with Intel's Enhanced Indirect Branch Restricted Speculation eIBRS capabilities, soon after VM exit or IBPB command event, the linear address following the most recent near CALL instruction prior to a VM exit may be used as the Return Stack Buffer RSB...
Intel® Processors Post Invalidation RSB Advisory
Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26373 Description: Non-transparent sharing of return predictor targets...
Insecure Cryptography
packbackbooks/lti-1p3-tool uses an insecure cryptographic configuration. The vulnerability exists due to improper configuration of generating cookies and openid values which allows an attacker to predict the token value and forge the token...
CVE-2022-28693
A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...
AMD Processors 信息泄露漏洞
AMD Processors is a processor from AMD. A security vulnerability exists in AMD Processors that stems from a branch prediction error on a return instruction. An attacker could exploit this vulnerability to execute arbitrary speculative code...
AMD CPU 安全漏洞
AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from a faulty training branch prediction of a return instruction that may allow execution of arbitrary speculative code under certain microarchitecture-related conditions...
PT-2022-4409 · Intel +3 · Intel Processors +3
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an unprotected alternative channel of return branch target prediction in some IntelR Processors, which may allow an authorized user to potentially enable...
Insecure Randomness
github.com/argoproj/argo-cd is vulnerable to insecure randomness. The vulnerability exists because the library used insufficient entropy to seed the non-cryptographically-secure pseudo-random number generator in Oauth2/OIDC login flows when SSO login is initiated from the Argo CD CLI or UI,...
The vulnerability of AMD processor-based LFENCE/JMP modules allows attackers to disclose protected information.
The vulnerability of AMD’s LFENCE/JMP processors lies in the characteristics of the branch prediction module’s operation. Exploiting this vulnerability allows an attacker to gain access to protected memory from a program that does not have the necessary privileges, by using the mechanism for...
UBUNTU-CVE-2014-125007
A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intrapred of the file libavcodec/hevcpredtemplate.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this...
GHSA-GGFX-H9XJ-5V9C Insecure PRNG use in random_password_generator
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Insecure PRNG use in random_password_generator
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Insecure PRNG use in random_password_generator
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
CVE-2019-25061
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
CVE-2019-25061
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Design/Logic Flaw
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Inadequate Encryption Strength
Overview randompasswordgenerator is a generates a random password with various useful options. Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of Kernelrand to generate passwords, which, as a result of its cyclic nature, can facilitate password...
CVE-2019-25061
The CVE affects the Ruby gem random_password_generator (up to version 1.0.0). The root cause is the use of Kernel#rand to generate passwords, which exhibits a cyclic behavior that can lead to password prediction. Documented impacts include potential exposure of generated passwords due to predicta...
