EUVD-2017-15344

Malware in sbrugna...

EUVD-2009-4556

Malware in sbrugna...

EUVD-2009-4802

Malware in sbrugna...

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from synchronization errors when using shared resources, allowing attackers to gain increased privileges.

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20067

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

Intel SPS和Intel CSME 安全漏洞

Intel SPS and Intel CSME are both products of Intel Corporation Intel, U.S.A. Intel SPS is a server platform service. Intel CSME is a converged security management engine. A security vulnerability exists in Intel SPS and Intel CSME that stems from an observable time difference that could lead to...

PT-2025-32695

Name of the Vulnerable Software and Affected Versions: IntelR Converged Security and Management Engine affected versions not specified Description: A time-of-check time-of-use TOCTOU race condition exists in the firmware. This may allow a privileged user to potentially escalate privileges via loc...

crypto: marvell/cesa - Handle zero-length skcipher requests

...

Akamai ASE 安全漏洞

Akamai ASE is an adaptive security engine from Akamai. A security vulnerability exists in Akamai ASE versions prior to 2024-12-10, which stems from Rule 3000216 not properly handling JavaScript variable assignments...

SUSE CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

DEBIAN-CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

UBUNTU-CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

A vulnerability in the Microprogramming Software Subsystem of the Intel Converged Security and Manageability Engine (CSME) exists, due to insufficient validation of input data. This allows attackers to trigger a service failure.

The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure...

PT-2024-8890 · Intel · Intel Csme

Name of the Vulnerable Software and Affected Versions: IntelR CSME affected versions not specified Description: The issue is related to improper initialization in the firmware of some IntelR CSME, which may allow a privileged user to potentially enable information disclosure via local access. Thi...

DEBIAN-CVE-2024-41002

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SEC resources. When releasing resources, it need to release the AIV resources at the same time. Otherwise, memory leakage occurs. The aiv...

PT-2024-19495 · Kwik · Kwik

Name of the Vulnerable Software and Affected Versions: Kwik version 745fd4e2 Description: The TLS engine does not track the current state of the connection, allowing Client Hello messages to be overwritten at any time, including after a connection has been established. Recommendations: For versio...

SUSE CVE-2019-11087

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

SUSE CVE-2019-11101

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

SUSE CVE-2019-11104

Insufficient input validation in MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...