Lucene search
+L

7045 matches found

Github Security Blog
Github Security Blog
•added 2022/05/13 1:08 a.m.•23 views

Nablarch Incomplete Cryptography

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

9.1CVSS6.5AI score0.00953EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/05/13 1:08 a.m.•32 views

GHSA-HMX6-GC2P-5P82 Nablarch Incomplete Cryptography

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

9.1CVSS5.9AI score0.00953EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/05/12 5:43 p.m.•39 views

CVE-2021-26362

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network SMN registers leading to a loss of integrity and availability...

7AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/11 5:15 p.m.•5 views

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

5.5CVSS6.3AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/11 5:15 p.m.•8 views

CVE-2021-26350

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service...

4.7CVSS6AI score0.00139EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/11 5:15 p.m.•26 views

Race condition

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service...

1.9CVSS4.7AI score0.00139EPSS
SaveExploits0References1Affected Software44
CVE
CVE
•added 2022/05/11 4:25 p.m.•117 views

CVE-2021-26364

CVE-2021-26364 affects a system with insufficient bounds checking in an SMU mailbox register, potentially allowing reading beyond the SRAM address range and triggering an exception handling path that could cause a denial of service. The description in the CVE notes this could occur locally and co...

5.5CVSS5.7AI score0.00217EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/11 4:25 p.m.•35 views

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

6.2AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/05/11 12:00 a.m.•13 views

AMD System Management Unit 安全漏洞

The AMD System Management Unit SMU is a system management unit of AMD in the United States. A security vulnerability exists in AMD System Management Unit. An attacker could exploit this vulnerability to obtain and manipulate the address of the message port register, resulting in a potential denia...

4.7CVSS5.4AI score0.00139EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•2 views

CVE-2021-26364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

5.5CVSS6.2AI score0.00217EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•2 views

CVE-2021-26350: Time-of-check Time-of-use (TOCTOU) Race Condition

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service...

4.7CVSS5.6AI score0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/11 12:00 a.m.•16 views

PT-2022-9740 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range, which could resul...

9.8CVSS6.9AI score0.74041EPSS
SaveExploits13References111
attackerkb
attackerkb
•added 2022/05/10 8:00 p.m.•8 views

CVE-2021-26362

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network SMN registers leading to a loss of integrity and availability...

7.1CVSS7AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•8 views

PT-2025-41015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s perf/smmuv3 component related to a hotplug callback leak within the arm smmu pmu init function. Specifically, the function fails to remove a callback...

5.5CVSS7.2AI score0.00156EPSS
SaveExploits0References20
OSV
OSV
•added 2022/04/29 4:15 p.m.•16 views

AZL-9646 CVE-2022-1353 affecting package kernel for versions less than 5.15.37.1-2

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

7.1CVSS6.6AI score0.00401EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/29 4:15 p.m.•14 views

UBUNTU-CVE-2022-1353

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

7.1CVSS6.6AI score0.00401EPSS
SaveExploits0References10
OSV
OSV
•added 2022/04/25 11:04 a.m.•8 views

OESA-2022-1617 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from th...

6.5CVSS6.7AI score0.00363EPSS
SaveExploits0References3
OSV
OSV
•added 2022/04/24 10:08 p.m.•10 views

GSD-2022-1002074 net: bcmgenet: Use stronger register read/writes to assure ordering

net: bcmgenet: Use stronger register read/writes to assure ordering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

7.3AI score
SaveExploits0
OSV
OSV
•added 2022/04/24 9:45 p.m.•14 views

GSD-2022-1001823 net: bcmgenet: Use stronger register read/writes to assure ordering

net: bcmgenet: Use stronger register read/writes to assure ordering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

7.3AI score
SaveExploits0
OSV
OSV
•added 2022/04/24 9:41 p.m.•10 views

GSD-2022-1001777 drm/dp: Fix off-by-one in register cache size

drm/dp: Fix off-by-one in register cache size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

7.2AI score
SaveExploits0
Rows per page
Query Builder