Lucene search
+L

448 matches found

CNNVD
CNNVD
added 2021/06/08 12:0 a.m.3 views

Intel Processors 信息泄露漏洞

Intel Processors are a U.S. Intel company that provide for the interpretation of computer instructions and the processing of data in computer software. An information disclosure vulnerability exists in Intel Processors that arises from improper isolation of shared resources. An authenticated...

3.3CVSS7AI score0.00383EPSS
SaveExploits0References34
OSV
OSV
added 2021/06/08 12:0 a.m.2 views

UBUNTU-CVE-2020-24511

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS6.7AI score0.00402EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.3 views

Intel Processors 信息泄露漏洞

Intel Processors are a U.S. Intel company that provide for the interpretation of computer instructions and the processing of data in computer software. An information disclosure vulnerability exists in Intel Processors that arises from improper isolation of shared resources. An authenticated...

6.5CVSS7.4AI score0.00402EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
added 2021/05/17 12:0 a.m.58 views

Ubuntu 18.04 LTS / 20.04 LTS : Intel Microcode vulnerabilities (USN-4628-3)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4628-3 advisory. USN-4628-1 provided updated Intel Processor Microcode for various processor types. This update provides the corresponding updates for some...

5.5CVSS7.3AI score0.0051EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:0 a.m.6 views

The vulnerability of JunOS operating system’s MX series routers lies in the simultaneous execution using shared resources with improper synchronization, allowing attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the JunOS operating system’s MX series routers lies in the simultaneous execution of processes using shared resources with incorrect synchronization. Exploiting this vulnerability allows a remote attacker to enhance their privileges, execute arbitrary code, or cause service...

8.3CVSS8AI score0.00627EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.9 views

The vulnerability of the get_old_root file in the fs/btrfs/ctree.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the getoldroot file in the fs/btrfs/ctree.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.5AI score0.00267EPSS
SaveExploits0References33Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the touch_pmd() function in Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

7CVSS6.8AI score0.02841EPSS
SaveExploits10References36Affected Software2
CNVD
CNVD
added 2021/03/10 12:0 a.m.8 views

Apache Oozie Competitive Conditions Vulnerability

Apache Oozie is an Apache Apache open source application. Provides a workflow scheduler system for managing Apache Hadoop job functions. Apache Oozie in version 5.2.1 before the existence of a security vulnerability , the vulnerability stems from the network system or product in the operation of...

4.7CVSS6.9AI score0.00434EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/04 12:0 a.m.6 views

The vulnerability in the socket implementation with address mapping AF_VSOCK in Linux kernel allows attackers to escalate their privileges.

The vulnerability in the socket implementation with AFVSOCK addressing net/vmwvsock/afvsock.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS6.5AI score0.01602EPSS
SaveExploits1References21Affected Software6
Debian
Debian
added 2021/02/05 6:48 p.m.72 views

[SECURITY] [DLA 2546-1] intel-microcode security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2546-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 06, 2021 https://wiki.debian.org/LTS -...

5.5CVSS6.4AI score0.0051EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:0 a.m.5 views

The vulnerability of the sysctl hugetlbl utility in the Linux operating system allows a hacker to cause a service failure or increase privileges.

The vulnerability of the sysctl hugetlbl utility in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures or elevate privileges...

6.6CVSS6.4AI score0.00272EPSS
SaveExploits0References32Affected Software12
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.8 views

The vulnerability of Junos operating system’s MX series routers, related to synchronization errors when using shared resources, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Junos operating system’s MX series routers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

8.3CVSS7.5AI score0.0069EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.8 views

The vulnerability in the driver/xen/events/events_base.c component of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the drivers/xen/events/eventsbase.c component in Linux operating systems arises from the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.6AI score0.00269EPSS
SaveExploits0References32Affected Software4
Mageia
Mageia
added 2020/11/13 9:20 p.m.69 views

Updated microcode package fixes security vulnerabilities

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to...

5.5CVSS5.7AI score0.0051EPSS
SaveExploits0References5
OSV
OSV
added 2020/11/12 6:15 p.m.2 views

ALPINE-CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.9AI score0.0051EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/12 6:15 p.m.3 views

DEBIAN-CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.1AI score0.0051EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/12 6:15 p.m.29 views

Design/Logic Flaw

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.2AI score0.0051EPSS
SaveExploits0References5Affected Software11
AlpineLinux
AlpineLinux
added 2020/11/12 6:1 p.m.50 views

CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6AI score0.0051EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2020/11/12 1:14 a.m.124 views

USN-4628-2: Intel Microcode regression

USN-4628-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Tiger Lake family from booting successfully. This update reverts the microcode update for the Tiger Lake processor family. Please note that the 'disucodeldr' kernel command...

7AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2020/11/11 6:56 a.m.126 views

USN-4628-1: Intel Microcode vulnerabilities

Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running Average Power Limit RAPL feature of some Intel processors allowed a side- channel attack based on power consumption measurements. A local attacker coul...

5.5CVSS6.9AI score0.0051EPSS
SaveExploits0
Rows per page
Query Builder