CVE-2020-0571: Undefined Security Weakness

Improper conditions check in BIOS firmware for 8th Generation IntelR CoreTM Processors and IntelR PentiumR Silver Processor Series may allow an authenticated user to potentially enable information disclosure via local access...

Windows Print Processor Persistence

This module establishes persistence by registering a malicious Print Processor DLL under HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Print Processors. The Print Spooler service loads configured processor DLLs at startup, causing payload execution when the spooler service starts for...

HPESBST04034 rev.1 - HPE 3PAR Service Processor, Using Exim Mail Transfer Agent (MTA), Remote Command Execution.

Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processor 5.0.6 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-10149 |...

DEBIAN-CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

kernel: memory leak in ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c

A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send invalid SHA type commands, could cause the system to crash. The highest threat from this vulnerability is to system availability...

kernel: memory leak in ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c

A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send invalid SHA type commands, could cause the system to crash. The highest threat from this vulnerability is to system availability...

CVE-2020-3513

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 RSP3 installed could allow an authenticated, local attacker with high privileges to execute...

CVE-2020-3508 Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

CVE-2020-3513 Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 RSP3 installed could allow an authenticated, local attacker with high privileges to execute...

Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

PT-2020-4176

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 RSP3 installed affected versions not specified Description: The issue is related to incorrect validations by boot scripts when specifi...

CVE-2020-3416: Exposed Dangerous Method or Function

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 RSP3 installed could allow an authenticated, local attacker with high privileges to execute...

PT-2020-4175

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 RSP3 installed affected versions not specified Description: The issue is related to incorrect validations by boot scripts when specifi...

UBUNTU-CVE-2020-25603

An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier e.g., smp...

Bpytop - Linux/OSX/FreeBSD Resource Monitor

Resource monitor that shows usage and stats for processor, memory, disks, network and processes. Python port of bashtop. Features Easy to use, with a game inspired menu system. Full mouse support, all buttons with a highlighted key is clickable and mouse scroll works in process list and menu boxe...

PT-2020-4289

Name of the Vulnerable Software and Affected Versions: Intel BIOS firmware for 8th Generation Intel Core Processors and Intel Pentium Silver Processor Series affected versions not specified Description: The issue is related to an improper conditions check in the BIOS firmware, which may allow an...

PT-2020-4285

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM and IntelR CeleronR Processor 4000 Series Processors affected versions not specified Description: The issue is related to an out of bound read in BIOS firmware, which may allow an unauthenticated user to potentially enable...

PT-2020-4288

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM versions 8th through 10th Generation IntelR CeleronR Processor versions 4000 & 5000 Series Description: The issue is related to improper initialization in BIOS firmware, which may allow a privileged user to enable denial of...

Intel BIOS Advisory

Summary: Potential security vulnerabilities in BIOS firmware for multiple Intel Platforms may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24457...

Intel BIOS Advisory

Summary: Potential security vulnerabilities in BIOS firmware for multiple Intel Platforms may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8672...