1078 matches found
CVE-2021-41840
An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere...
CVE-2021-21996
An Exposure of Resource to Wrong Sphere flaw was found in Salt. This flaw allows a user who has control of the source and sourcehash URLs to gain full file system access as root on a Salt minion...
The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to the device.
The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to the device...
GHSA-2WR2-8QJQ-GH55 Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...
The vulnerability of the Azure Sphere operating system, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the Azure Sphere operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
An Azure Sphere kernel exploit — or how I learned to stop worrying and love the IoT
By Claudio Bozzato and Lilith ^.^;. As part of our continued research into Microsoft Azure Sphere, there are two vulnerabilities we discovered that we feel are particularly dangerous. For a full rundown of the 31 vulnerabilities we’ve discovered over the past year, check out our full recap... Thi...
A review of Azure Sphere vulnerabilities: Unsigned code execs, kernel bugs, escalation chains and firmware downgrades
Summary of all the vulnerabilities reported by Cisco Talos in Microsoft Azure Sphere By Claudio Bozzato and Lilith . In May 2020, Microsoft kicked off the Azure Sphere Security Research Challenge, a three-month initiative aimed at finding bugs in Azure Sphere. In the first three months,... This i...
CVE-2021-26248
Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor...
CVE-2021-42300
Azure Sphere Tampering Vulnerability...
CVE-2021-42300
Azure Sphere Tampering Vulnerability...
CVE-2021-41374
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41376
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41376
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41375
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41375
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41374
Azure Sphere Information Disclosure Vulnerability...
