CVE-2022-27187

Intel Quartus Prime Standard edition (before 21.1 Patch 0.02std) is affected by CVE-2022-27187 due to an uncontrolled search path element. An authenticated user could potentially escalate privileges via local access. Impact is described as privilege escalation with local access; the advisory note...

CVE-2022-27233

XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-27187

Uncontrolled search path element in the IntelR Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27233

XML injection in the Intel Quartus Prime Programmer (Pro/Standard editions) is the root cause of CVE-2022-27233, potentially allowing an unauthenticated user to disclose information via network access. Affected: Quartus Prime Programmer Pro edition before 22.1 and Standard edition before 21.1 Pat...

Intel Quartus Prime 代码问题漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime Standard and Intel Quartus Prime Pro that originates from an uncontrolled search path element that could allow an...

PT-2022-18317 · Intel · Quartus Prime Standard +1

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Pro and Standard edition software affected versions not specified Description: The issue concerns XML injection in the QuartusR Prime Programmer, which may allow an unauthenticated user to potentially enable information...

PT-2022-18276 · Intel · Intel Quartus Prime Standard

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Standard edition software versions prior to 21.1 Patch 0.02std Description: The issue is related to an uncontrolled search path element, which may allow an authenticated user to potentially enable escalation of privilege...

Intel Quartus Prime 安全漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime Standard and Intel Quartus Prime Pro that originates from XML injection and could allow unauthenticated users to potentiall...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Leaked Amazon Prime Video Server Exposed Users Viewing Habits

By Waqas Security researcher Anurag Sen revealed Amazon failed to protect one of its internal servers, which allowed any third party to access the database. This is a post from HackRead.com Read the original post: Leaked Amazon Prime Video Server Exposed Users Viewing Habits...

CVE-2022-0778 - Infinite loop in BN_mod_sqrt() reachable when parsing certificates

Security Advisory ID: BSA-2022-1752 Component: OpenSSL Revision: 2.0 The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. More information is at https://www.openssl.org/news/secadv/20220315.txt Affected Products Broca...

Session fixation

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this...

CVE-2022-40629

The CVE-2022-40629 entry concerns Tacitine Firewall, affecting EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100, versions 19.1.1 through 22.20.1. Root cause: insecure design in the web-based management interface that allows an unauthenticated remote attacker to view sensitive information via a spec...

CVE-2022-40628

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit...

CVE-2022-40628 Remote Code Execution Vulnerability in Tacitine Firewall

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit...

PT-2022-25425 · Unknown · Tacitine Firewall +2

Name of the Vulnerable Software and Affected Versions: Tacitine Firewall versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-35 versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-100 versions 19.1.1 through 22.20.1 Description: This issue exists due to improper control of code generation in the...

PT-2022-25428 · Unknown · Tacitine Firewall +2

Name of the Vulnerable Software and Affected Versions: Tacitine Firewall versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-35 versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-100 versions 19.1.1 through 22.20.1 Description: This issue is due to improper session management in the Tacitine Firewal...

Tacitine EN6200 安全漏洞

The Tacitine EN6200 is a series of firewalls from Tacitine. A security vulnerability exists in Tacitine Firewall's EN6200-PRIME QUAD-35 and EN6200-PURIME QUAD-100 versions 19.1.1 through 22.20.1, which stems from an insecure design of Tacitine-Firewall's web-based management interface...

CVE-2018-0732. Client DoS due to large DH parameter.

During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...

Ubuntu: Security Advisory (USN-3692-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...