Lucene search
+L

7009 matches found

Cvelist
Cvelist
added 2019/07/11 8:23 p.m.22 views

CVE-2019-11133

Improper access control in the IntelR Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

7.5AI score0.00411EPSS
SaveExploits0References4
CVE
CVE
added 2019/07/11 8:23 p.m.258 views

CVE-2019-11133

CVE-2019-11133 concerns the Intel Processor Diagnostic Tool prior to version 4.1.3.35, where improper access control may allow an authenticated user to escalate privileges, disclose information, or cause denial of service via local access. The Red Hat intel advisory and Intel security advisory co...

7.8CVSS7.4AI score0.00411EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/07/11 8:15 p.m.11 views

CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

7.5CVSS5.8AI score0.01841EPSS
SaveExploits0References2
Prion
Prion
added 2019/07/11 8:15 p.m.24 views

Design/Logic Flaw

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

7.8CVSS7.5AI score0.01841EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2019/07/11 7:40 p.m.166 views

CVE-2019-0052

The CVE-2019-0052 issue affects Juniper Networks Junos OS on SRX Series gateways, where the srxpfe process crashes when the UTM/JSF module processes a specific fragmented HTTP packet. The packet is misinterpreted as a normal TCP packet, causing a processor crash. Affected releases cover multiple ...

7.8CVSS7.5AI score0.01841EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/07/11 7:40 p.m.36 views

CVE-2019-0052 SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

7.5CVSS7.5AI score0.01841EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/07/11 12:0 a.m.6 views

Intel Processor Diagnostic Tool elevation of privilege vulnerability (CNVD-2019-22204)

Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. An elevation of privilege vulnerability exists in Intel IPDT versions prior to 4.1.2.24. An attacker can exploit this vulnerability to elevate privileges, disclose information, or cause a denial of servic...

7.8CVSS7AI score0.00411EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/10 10:44 a.m.10 views

MGASA-2019-0207 Updated microcode package fixes security vulnerability

Secure Encrypted Virtualization SEV on Advanced Micro DevicesAMD Platform Security Processor PSP; aka AMD Secure Processor or AMD-SP 0.17 build 11 and earlier has an insecure cryptographic implementation. This update provides Amd SEV Firmware to 0.17 build 22 CVE-2019-9836. It also updates the...

5.3CVSS5.2AI score0.01609EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/07/10 10:44 a.m.38 views

Updated microcode package fixes security vulnerability

Secure Encrypted Virtualization SEV on Advanced Micro DevicesAMD Platform Security Processor PSP; aka AMD Secure Processor or AMD-SP 0.17 build 11 and earlier has an insecure cryptographic implementation. This update provides Amd SEV Firmware to 0.17 build 22 CVE-2019-9836. It also updates the...

5.3CVSS1.7AI score0.01609EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/07/10 12:0 a.m.5 views

Denial of Service Vulnerability in Omron CJ2M-CPU31

CJ2M-CPU31 is a programmable logic controller PLC A denial of service vulnerability exists in the Omron CJ2M-CPU31, which can be exploited by an attacker to cause CPU resource exhaustion by sending specific packets to the target PLC on a continuous basis...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/07/10 12:0 a.m.7 views

PT-2019-4893 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.12 Description: The issue is related to an incompatibility between Process Context Identifiers PCID and TLB flushes, allowing x86 PV guest OS users to cause a denial of service or gain privileges. This is due to...

9.8CVSS7.7AI score0.16658EPSS
SaveExploits5References152
ThreatPost
ThreatPost
added 2019/07/09 11:9 p.m.101 views

Intel Patches High-Severity Flaw in Processor Diagnostic Tool

Intel has patched a high-severity vulnerability in its processor diagnostic tool, which could allow local attackers to launch several malicious attacks on affected devices, such as escalation of privilege or denial of service. The Intel Processor Diagnostic tool is a free product that allows user...

4.6CVSS8AI score0.00515EPSS
SaveExploits0References10
OSV
OSV
added 2019/07/09 7:15 p.m.9 views

CVE-2019-11991

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

9.8CVSS5.8AI score0.04695EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/09 7:15 p.m.20 views

CVE-2019-11991

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

9.8CVSS9.1AI score0.04695EPSS
SaveExploits0References1
Prion
Prion
added 2019/07/09 7:15 p.m.25 views

Information disclosure

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

9.7CVSS8.9AI score0.04695EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/07/09 6:32 p.m.113 views

CVE-2019-11991

CVE-2019-11991 concerns a remote information-disclosure vulnerability in HPE 3PAR Service Processor (SP) versions 4.1 through 4.4. The flaw affects the SP itself and any managed 3PAR arrays, potentially compromising confidentiality, integrity, and availability. The supplied connected documents co...

9.8CVSS8.8AI score0.04695EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/07/09 6:32 p.m.32 views

CVE-2019-11991

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

9.1AI score0.04695EPSS
SaveExploits0References1
Fedora
Fedora
added 2019/07/09 2:25 a.m.66 views

[SECURITY] Fedora 29 Update: qemu-3.0.1-4.fc29

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

9.8CVSS0.5AI score0.06169EPSS
SaveExploits3
Fedora
Fedora
added 2019/07/09 12:56 a.m.68 views

[SECURITY] Fedora 30 Update: qemu-3.1.0-9.fc30

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

9.8CVSS0.5AI score0.05546EPSS
SaveExploits1
CISA
CISA
added 2019/07/09 12:0 a.m.16 views

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in Intel Solid State Drives for Data Centers and Intel Processor Diagnostic Tool. An attacker could exploit these vulnerabilities to gain an escalation of privileges on a previously infected machine. The Cybersecurity and Infrastructu...

7.4AI score
SaveExploits0References2
Rows per page
Query Builder