The vulnerability of the PAN-OS operating system’s web interface, which allows a perpetrator to gain access to protected information

The vulnerability of the PAN-OS operating system’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these drivers...

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

CVE-2019-6156

CVE-2019-6156 concerns Lenovo systems where SMM BIOS Write Protection prevents writes to SPI Flash, with an additional layer via SPI Protected Range Registers (PRx). After resuming from S3 sleep on various Lenovo BIOS versions, PRx is not set, but this does not compromise SMM BIOS Write Protectio...

USN-3944-1 wpa vulnerabilities

It was discovered that wpasupplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. CVE-2019-9495 Mathy Vanhoef discovered that wpasupplicant and hostapd incorrectly validated received scalar and...

The vulnerability of the OpenSSL library, related to errors in cryptographic transformations, allows a hacker to disclose the protected information.

The vulnerability of the OpenSSL library is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

A vulnerability in the Google Chrome browser, related to a bug in network authentication implementation, allows attackers to compromise the integrity of protected information.

The vulnerability in Google Chrome relates to a implementation error in network authentication. Exploiting this vulnerability allows an attacker to compromise the integrity of protected information through a specially created HTML page...

The vulnerability of the implementation of the Digital Signature Algorithm (DSA) in the OpenSSL library allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Digital Signature Algorithm implementation in the OpenSSL library is related to errors in managing cryptographic keys. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by recovering the secret...

SPI Protected Range Registers Affected by S3 Sleep Mode - Lenovo Support US

No description provided...

The vulnerability of the SAP Fiori Client mobile environment, related to deficiencies in access control, allows a malicious actor to gain unauthorized access to protected information and execute arbitrary JavaScript code.

The vulnerability of the SAP Fiori Client mobile environment is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information and execute arbitrary JavaScript code...

The vulnerabilities of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations allow attackers to gain access to protected information due to insufficient validation of input data.

The vulnerability of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to protected information...

The return of the BOM

There's nothing new in Brazilian cybercriminals trying out new ways to stay under the radar. It's just that this time around the bad guys have started using a method that was reported in the wild years ago. Russian gangs used this technique to distribute malware capable of modifying the hosts fil...

Microsoft Office Protected View Disabled

A Microsoft Office application installed on the remote host has protected view disabled. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is copyright C Microsoft Corporation...

The vulnerability of the Windows Print Spooler component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of browsers Internet Explorer and Microsoft Edge, related to insecure management of privileges, allows attackers to disclose protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Windows GDI component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...