Lucene search
+L

7436 matches found

ATTACKERKB
ATTACKERKB
added 2021/10/20 7:15 a.m.6 views

CVE-2021-1968

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

6.2CVSS6AI score0.00174EPSS
SaveExploits0References3
Prion
Prion
added 2021/10/20 7:15 a.m.24 views

Buffer overflow

Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

3.6CVSS7.1AI score0.0015EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/20 7:15 a.m.5 views

CVE-2021-1969

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

6.2CVSS6AI score0.00176EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/10/20 12:0 a.m.40 views

CVE-2021-1969

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

6.2CVSS6.5AI score0.00176EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:0 a.m.21 views

The vulnerability of AMD’s microprogrammed software for processors lies in the speculative execution of read and write operations that access memory using invalid non- canonical addresses. This allows a hacker to exploit the vulnerability to gain access to information about the CPU’s address space.

The vulnerability of AMD’s microprogramming software is related to speculative operations for reading and writing data to memory, involving the use of non- canonical addresses. Exploiting this vulnerability can allow an attacker to gain access to information about the CPU’s address space, by usin...

6.2CVSS5.5AI score0.0242EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/10/20 12:0 a.m.14 views

PT-2021-13714 · Qualcomm · Qualcomm Gpu Driver

Name of the Vulnerable Software and Affected Versions: Qualcomm npu driver affected versions not specified Description: The issue is related to improper validation of kernel buffer address while copying information back to user buffer, which can lead to kernel memory information exposure to user...

6.2CVSS5.4AI score0.00176EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2021/10/20 12:0 a.m.35 views

CVE-2021-1968

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

6.2CVSS6.5AI score0.00174EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/19 4:33 p.m.14 views

GSD-2021-1001711 ext4: fix reserved space counter leakage

ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/19 4:33 p.m.15 views

UVI-2021-1001711 ext4: fix reserved space counter leakage

ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/19 4:29 p.m.11 views

UVI-2021-1001640 ext4: fix reserved space counter leakage

ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/19 4:29 p.m.17 views

GSD-2021-1001640 ext4: fix reserved space counter leakage

ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/19 4:25 p.m.17 views

GSD-2021-1001589 ext4: fix reserved space counter leakage

ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/19 4:25 p.m.15 views

UVI-2021-1001589 ext4: fix reserved space counter leakage

ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/15 3:15 p.m.5 views

CVE-2021-40729

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

3.3CVSS7.1AI score0.0428EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/10/14 12:0 a.m.34 views

PT-2021-7118 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15-rc1 Description: The issue is related to the io-workqueue implementation in the Linux kernel, which lacks protection of internal data. This can be exploited to cause a denial of service. A local user with...

9.8CVSS7.5AI score0.88606EPSS
SaveExploits317References1061
UbuntuCve
UbuntuCve
added 2021/10/13 7:15 p.m.405 views

CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

4.7CVSS5.9AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 7:15 p.m.7 views

UBUNTU-CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

4.7CVSS5.8AI score0.00327EPSS
SaveExploits0References3
CVE
CVE
added 2021/10/13 6:29 p.m.81 views

CVE-2021-26318

CVE-2021-26318 corresponds to a timing and power-based side-channel issue on some AMD CPUs that could potentially leak kernel address space information via the x86 PREFETCH instruction. Affected software/hardware: all AMD CPUs (per AMD: Side-channels Related to the x86 PREFETCH Instruction). Root...

4.7CVSS4.6AI score0.00327EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2021/10/13 11:20 a.m.7 views

HTTP Request Smuggling

Overview llhttp is a set of Ruby bindings for llhttp. Affected versions of this package are vulnerable to HTTP Request Smuggling via llhttp. The HTTP parser accepts requests with a space SP right after the header name before the colon. Remediation There is no fixed version for llhttp. References ...

6.5CVSS7.2AI score0.02936EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.8 views

Advanced Micro Devices Cpu 信息泄露漏洞

The Advanced Micro Devices Cpu Amd Cpu is an excellent central processor for Amd from Advanced Micro Devices, USA . The Advanced Micro Devices Cpu has a security vulnerability that can be exploited by an attacker to cause kernel address space information disclosure on some AMD cpus utilizing the...

4.7CVSS5.2AI score0.00327EPSS
SaveExploits0References3
Rows per page
Query Builder