grapheneX

grapheneX コンピューティングにおいて、ハードニングとは通常、システムの脆弱性表面を減らすことでセキュリティを強化するプロセスを指します。システムがより多くの機能を実行するほど脆弱性表面は大きくなります。原則として、単一機能のシステムは多目的なシステムよりも安全です。攻撃経路を減らす方法としては、デフォルトパスワードの変更、不要なソフトウェアの削除、不要なユーザー名やログインの削除、不要なサービスの無効化や削除などが含まれます。 grapheneX...

The vulnerability of the `updateProvidersWhenServiceRemoved` method in the `CredentialManagerService.java` class of the Android operating system framework component allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the updateProvidersWhenServiceRemoved method in the CredentialManagerService.java class of the Android operating system’s framework is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to disclose sensitive information that is...

CVE-2026-0016

In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

openSUSE: Security Advisory for connman (openSUSE-SU-2023:0369-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2023:0369-1 Security update for connman

This update for connman fixes the following issues: Update to 1.42 Fix issue with iwd and signal strength calculation. Fix issue with iwd and handling service removal. Fix issue with iwd and handling new connections. Fix issue with handling default online check URL. Fix issue with handling...

CVE-2022-4239

The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon service, when processing the workreapaddonsserviceremove action, allowing any user to delete any post by knowing or guessing the id...

CVE-2022-22676

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...

CVE-2018-6961

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future...

CVE-2018-6961

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future...

CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to...

Error "BlobCall: Undefined function id: 'xx' "

Challenge Log truncation or indexing for the guest fails with one of the following errors: Failed to inventory guest system: BlobCall: Undefined function id: '9' Unable to truncate transaction logs. Details: BlobCall: Undefined function id: '18' Failed to collect Oracle info BlobCall: Undefined...

MS08-068 Microsoft Windows SMB Relay Code Execution

This module will relay SMB authentication requests to another host, gaining access to an authenticated SMB session if successful. If the connecting user is an administrator and network logins are allowed to the target machine, this module will execute an arbitrary payload. To exploit this, the...