Command injection

Certain versions between 2.x to 5.x refer to advisory of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixe...

CVE-2019-5490

Certain versions between 2.x to 5.x refer to advisory of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixe...

CVE-2019-5490

Certain versions between 2.x to 5.x refer to advisory of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixe...

CVE-2019-5490

Certain versions between 2.x to 5.x refer to advisory of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixe...

CVE-2019-5490

CVE-2019-5490 affects NetApp Service Processor firmware 2.x–5.x, shipped with a default account enabled, enabling unauthorized command execution. The issue is tied to the default-privilege account and is documented by NetApp/Lenovo advisories; affected platforms may include the listed models, req...

UBUNTU-CVE-2018-16789

libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request, an attacker could exploit this to force shellinaboxd into an infinite loop, exhausting available CPU resources and taking the service down...

PT-2019-3473 · Apache +8 · Apache Traffic Server +9

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions affected versions not specified Apache HTTP Server versions affected versions not specified Node.js versions affected versions not specified Description: The issue is related to errors in the mechanism controlli...

Intel 8th Generation Intel Core Processor and 7th Generation Intel Core Processor Privilege Permission and Access Control Issues Vulnerability

The 8th Generation Intel Core Processor and 7th Generation Intel Core Processor are both products of Intel Corporation. 8th Generation Intel Core Processor is an 8th Generation Core Series The 8th Generation Intel Core Processor is an eighth-generation Core series central processing unit CPU, whi...

Intel 7th Generation Intel Core Processor and 8th Generation Intel Core Processor Trust Management Issues Vulnerability

The Intel 8th Generation Intel Core Processor and Intel 7th Generation Intel Core Processor are both products of Intel Corporation.The Intel 8th Generation Intel Core Processor is an Intel 8th Generation Intel Core Processor. The Intel 8th Generation Intel Core Processor is an eighth-generation...

CVE-2018-12202

Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor may allow privileged user to potentially leverage existing features via local access...

Privilege escalation

Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor may allow privileged user to potentially leverage existing features via local access...

CVE-2018-12203

Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access...

CVE-2018-12202

Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor may allow privileged user to potentially leverage existing features via local access...

CVE-2018-12203

Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access...

CVE-2018-12202

Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor may allow privileged user to potentially leverage existing features via local access...

CVE-2018-12201

CVE-2018-12201 is a buffer overflow vulnerability in Platform Sample/Silicon Reference firmware affecting multiple Intel processors (8th/7th Gen Core, Pentium Silver J5005/N5000, Celeron J4105/J4005/N4100/N4000) that could allow a privileged user to execute arbitrary code via local access. Relate...

CVE-2018-12202

CVE-2018-12202 is a privilege-escalation flaw in Platform Sample/Silicon Reference firmware affecting Intel 8th/7th Gen Core processors. A privileged local user could leverage existing features to escalate privileges; Intel’s advisory and Lenovo threat coverage indicate mitigation via firmware up...

CVE-2018-12203

CVE-2018-12203 is a Denial of Service vulnerability in Intel Platform Sample/Silicon Reference firmware for 8th/7th Gen Intel Core processors. The available connected sources indicate it could allow a privileged user to potentially execute arbitrary code via local access. Intel’s advisory INTEL-S...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5740416861732864 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

Intel CPU Spoiler vulnerability alerts-a vulnerability alert-the black bar safety net

Spoiler is the researchers found that the impact of the Intel microprocessor architecture of a speculative attack a speculative attack is a new microprocessor disclosure vulnerability that leaks is about the physical page to the user space process mapping of key information. Spoiler with 2018 1 o...