Microsoft Azure Sphere Kernel GPIO_GET_PIN_ACCESS_CONTROL_USER information disclosure vulnerability

Talos Vulnerability Report TALOS-2021-1340 Microsoft Azure Sphere Kernel GPIOGETPINACCESSCONTROLUSER information disclosure vulnerability November 9, 2021 CVE Number None SUMMARY An information disclosure vulnerability exists in the GPIOGETPINACCESSCONTROLUSER functionality of Microsoft Azure...

Microsoft Azure Sphere Security Monitor SMSyscallStageBaseManifests offset calculation out-of-bounds read vulnerability

Summary An out-of-bounds read vulnerability exists in the Security Monitor SMSyscallStageBaseManifests offset calculation of Microsoft Azure Sphere 21.01. A specially crafted manifest could lead to information disclosure. An attacker can use syscalls to trigger this vulnerability. Tested Versions...

Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...

GHSA-WPVM-WQR4-P7CW Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...

Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...

CVE-2021-36956

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-36956

Azure Sphere Information Disclosure Vulnerability...

Information disclosure

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-36956

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-36956

Azure Sphere CVE-2021-36956 is an information-disclosure vulnerability in Azure Sphere OS. The issue is described as a lack of protection for service data, enabling sensitive data exposure. Impact is disclosed as data leakage (CONFIDENTIALITY impact). Root cause notes point to unprotected service...

CVE-2021-36956 Azure Sphere Information Disclosure Vulnerability

...

CVE-2021-36956: Undefined Security Weakness

Azure Sphere Information Disclosure Vulnerability...

Azure Sphere Information Disclosure Vulnerability

...

PT-2021-6958 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...

Microsoft Azure Sphere 安全漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A security vulnerability exists in Microsoft Azure Sphere. The following products and versions are affected: Azure Sphere...

Microsoft Azure Sphere Security Monitor SMSyscallPeripheralAcquire information disclosure vulnerability

Talos Vulnerability Report TALOS-2021-1309 Microsoft Azure Sphere Security Monitor SMSyscallPeripheralAcquire information disclosure vulnerability September 14, 2021 CVE Number None SUMMARY An information disclosure vulnerability exists in the Security Monitor SMSyscallPeripheralAcquire...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1250-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

The vulnerability of the Azure Sphere operating system, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Azure Sphere operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of Azure Sphere operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Azure Sphere operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of Azure Sphere operating systems, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Azure Sphere operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...