Lucene search
+L

6906 matches found

OSV
OSV
added 2020/05/20 6:16 a.m.15 views

LSN-0067-1 Kernel Live Patch Security Notice

It was discovered that the Serial CAN interface driver in the Linux kernel did not properly initialize data. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-11494...

4.4CVSS5.6AI score0.00722EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/19 8:33 p.m.8 views

USN-4364-1 linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the ADIS16400 IIO IMU Driver for the Linux kernel did not properly deallocate memory in certain error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2019-19060 It was discovered that the vhost net driver in the Linux kernel...

7.8CVSS7.1AI score0.03608EPSS
SaveExploits1References8
Ubuntu
Ubuntu
added 2020/05/19 8:33 p.m.184 views

USN-4364-1: Linux kernel vulnerabilities

It was discovered that the ADIS16400 IIO IMU Driver for the Linux kernel did not properly deallocate memory in certain error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2019-19060 It was discovered that the vhost net driver in the Linux kernel...

7.8CVSS7AI score0.03608EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2020/05/19 8:04 p.m.233 views

USN-4368-1: Linux kernel vulnerabilities

Tristan Madani discovered that the file locking implementation in the Linux kernel contained a race condition. A local attacker could possibly use this to cause a denial of service or expose sensitive information. CVE-2019-19769 It was discovered that the Serial CAN interface driver in the Linux...

7.8CVSS6.3AI score0.01337EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/05/19 12:00 a.m.47 views

Ubuntu: Security Advisory (USN-4363-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.00722EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/05/19 12:00 a.m.8 views

Unauthorized Access Vulnerability in Serial Port Server of China Telecom Group Corporation Ltd.

China Telecom Group Limited serial port server can provide serial port to Internet role. An unauthorized access vulnerability exists in the China Telecom Group Limited Serial Port Server, which can be exploited by attackers to compromise confidentiality...

6.9AI score
SaveExploits0
Fedora
Fedora
added 2020/05/18 2:44 a.m.40 views

[SECURITY] Fedora 32 Update: condor-8.8.8-1.fc32

HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs t...

9.8CVSS0.3AI score0.02811EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/05/18 12:00 a.m.54 views

Fedora 31 : 1:java-1.8.0-openjdk (2020-a60ad9d4ec)

Update to OpenJDK 8u252 April Critical Patch Update - JDK-8223898, CVE-2020-2754: Forward references to Nashorn - JDK-8223904, CVE-2020-2755: Improve Nashorn matching - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues - JDK-822560...

8.3CVSS6.4AI score0.0623EPSS
SaveExploits0References12
Fedora
Fedora
added 2020/05/17 3:49 a.m.34 views

[SECURITY] Fedora 31 Update: condor-8.8.8-1.fc31

HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs t...

9.8CVSS0.3AI score0.02811EPSS
SaveExploits0
Fedora
Fedora
added 2020/05/17 3:20 a.m.50 views

[SECURITY] Fedora 30 Update: condor-8.8.8-1.fc30

HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queuing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs t...

9.8CVSS0.3AI score0.02811EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.8 views

The vulnerability of the USB driver for the Xirlink camera (drivers/media/usb/gspca/xirlink_cit.c) in the Linux kernel allows a hacker to compromise the integrity of protected information and cause service failures.

The vulnerability of the USB driver for the Xirlink camera driver/media/usb/gspca/xirlinkcit.c in the Linux kernel is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information and cause system failures...

7.1CVSS6.4AI score0.00483EPSS
SaveExploits0References37Affected Software3
RedHat Linux
RedHat Linux
added 2020/05/12 3:16 p.m.7 views

kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free

A use-after-free flaw was found in the Linux kernel’s input device driver functionality when unplugging a device. A user with physical access could use this flaw to crash the system...

4.9CVSS6.8AI score0.00738EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/05/12 12:00 a.m.6 views

Zephyr USB Mass Storage Buffer Overflow Vulnerability

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation in the U.S. USB Mass Storage is one of the USB mass storage components. A buffer overflow vulnerability exists in USB Mass Storage in Zephyr versions 1.14.1 and later and 2.1.0 and later. An attacker...

8.1CVSS7.5AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/11 11:15 p.m.9 views

CVE-2020-10019

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...

7.8CVSS5.9AI score0.00451EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/05/11 12:00 a.m.19 views

Linux kernel denial of service vulnerability (CNVD-2020-28264)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/spi/spi-dw.c file in Linux kernel versions prior to 5.4.17. An attacker can exploit this vulnerability to cause a denial...

5.5CVSS6.1AI score0.00652EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2020/05/10 12:00 a.m.9 views

PT-2020-5402 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.1.0 Description: The issue is related to an out-of-bound read in irp functions, specifically in parallel process irp create, serial process irp create, drive process irp write, printer process irp write, rdpei recv...

9.8CVSS6.5AI score0.8226EPSS
SaveExploits42References396
OSV
OSV
added 2020/05/09 9:15 p.m.11 views

UBUNTU-CVE-2020-12769

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwspiirq and dwspitransferone, aka CID-19b61392c5a8...

5.5CVSS6.7AI score0.00652EPSS
SaveExploits1References7
CNVD
CNVD
added 2020/05/06 12:00 a.m.13 views

Ubiquiti Networks UniFi Cloud Key Access Control Error Vulnerability

Ubiquiti Networks UniFi Cloud Key is a secret key device that supports management of UniFi networks from Ubiquiti Networks USA. An Access Control Error vulnerability exists in the Ubiquiti Networks UniFi Cloud Key gen2 and Cloud Key gen2 Plus using firmware version 1.1.10 and earlier, which can b...

7.2CVSS7.2AI score0.00356EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/02 4:15 p.m.4 views

CVE-2020-8157

UniFi Cloud Key firmware = v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial interface UART...

6.8CVSS5.8AI score0.00356EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/05/02 3:19 p.m.26 views

CVE-2020-8157

UniFi Cloud Key firmware = v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial interface UART...

6.7AI score0.00356EPSS
SaveExploits0References2
Rows per page
Query Builder