98 matches found
CVE-2020-8715: Release of Invalid Pointer or Reference
Invalid pointer for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2020-8716: Undefined Security Weakness
Improper access control for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2020-8720: Buffer Copy without Checking Size of Input
Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access...
CVE-2020-8731: Incorrect Permission Assignment for Critical Resource
Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8707: Buffer Copy without Checking Size of Input
Buffer overflow in daemon for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-8729: Buffer Copy without Checking Size of Input
Buffer copy without checking size of input for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8722: Buffer Copy without Checking Size of Input
Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8730: Out-of-bounds Write
Heap-based overflow for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8708: Improper Authentication
Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-8718: Buffer Copy without Checking Size of Input
Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8721: Improper Input Validation
Improper input validation for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8719: Buffer Copy without Checking Size of Input
Buffer overflow in subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8706: Buffer Copy without Checking Size of Input
Buffer overflow in a daemon for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules
Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges. The recently patched flaw CVE-2020-8708 ranks 9.6 out of 10 on the CVSS...
SYS.1.2.2 Windows Server 2012
Zielsetzung dieses Bausteins ist der Schutz von Informationen und Prozessen, die durch Serversysteme auf Basis von Windows Server 2012 R2 im Regelbetrieb verarbeitet bzw. gesteuert werden. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced source...
Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us
Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...
Microsoft confirms Windows BROWSER protocol zero-day !
A security researcher has released proof-of-concept code for an unpatched security vulnerability affecting all versions of Windows, prompting a warning from Microsoft that remote code execution attacks are theoretically possible. Details on the vulnerability were released on the Full Disclosure...