CVE-2019-0165

Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-2274

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

Improper access control

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

CVE-2019-2274

CVE-2019-2274 describes an Improper Access Control issue for RPU write access from the secure processor in Qualcomm-supplied Snapdragon platforms (Auto, Compute, CE Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wired Infrastructure/Networking). Affected families include APQ80...

CVE-2019-2274

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

PT-2019-16349

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to improper access control for RPU write access from a secure processor in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdrago...

CVE-2019-2274: Undefined Security Weakness

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

GraphicsMagick ReadXBMImage DoS

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

GraphicsMagick ReadXBMImage DoS

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Intel® Processor Diagnostic Tool Advisory

Summary: A potential security vulnerability in the Intel® Processor Diagnostic Tool may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11133...

Security Bulletin: IBM System Planning Tool for POWER processor-based systems (TESTING NOTIFICATION)

Summary IBM System Planning Tool for POWER processor-based systems Vulnerability Details Overview Download Releases Support Current version IBM System Planning Tool - Version 6.18.047.0 EXE, 192MB Important note for Symantec Endpoint Protection Users: In order to avoid problems with the download ...

Hackers Can Mess With Voltages to Steal Intel Chips' Secrets

A new attack called Plundervolt gives attackers access to the sensitive data stored in a processor's secure enclave...

PDFium PDF Content Processor Code Execution

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers relates to the writing beyond the buffer memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

CVE-2019-19587

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2020-16058)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9650 is a central processing unit CPU product. A resource management error vulnerability exists in DSP Services in multiple Qualco...

CVE-2019-19587

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console...

USN-4182-3: Intel Microcode regression

USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

CVE-2019-19587: Improper Neutralization of Input During Web Page Generation

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console...

PDFium PDF Content Processor Code Execution

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers arises from reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

HTTP/2: large amount of data requests leads to denial of service

A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a...