12423 matches found
CVE-2014-1422
In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in...
CVE-2014-1422
In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in...
Design/Logic Flaw
In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in...
CVE-2014-1422
The CVE-2014-1422 issue affects Ubuntu’s trust-store component. It causes location permissions revocation to be ineffective because the cache of permissions is honored based on an incorrect ordering and not by creation time, due to the Select struct in src/core/trust/impl/sqlite3/store.cpp. Pract...
CVE-2014-1422 Location service uses cached authorization even after revocation
In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4427-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4427-1 advisory. It was discovered that the Kvaser CAN/USB driver in the Linux kernel did not properly initialize memory in certain situations. A local attacker could...
kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.
A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...
AZL-34928 CVE-2020-2981 affecting package libdb for versions less than 5.3.28-7
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
AZL-6631 CVE-2020-2981 affecting package libdb for versions less than 5.3.28-7
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2020-2981
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2020-2981
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
Design/Logic Flaw
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2020-2981
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2020-2981
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2020-2981
CVE-2020-2981 affects Oracle Berkeley DB’s Data Store component. Affected versions are prior to 18.1.40 of the libdb/Data Store, with impact on confidentiality, integrity and availability. The vulnerability is described as difficult to exploit and requires user interaction and logon to the infras...
Database of Indonesian store Bhinneka dumped with 1 million+ accounts
By Sudais Asif The sample data seen by Hackread.com suggests Bhinneka was breached in January 2020. This is a post from HackRead.com Read the original post: Database of Indonesian store Bhinneka dumped with 1 million+ accounts...
Unspecified Vulnerability in Oracle Berkeley DB Data Store Component
Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries , it can be with C, C++, Java, Perl, Python, Tcl and many other languages to bind . Data Store is one of the data storage components. A security vulnerability exists in the Oracle Berkele...
July 14, 2020—KB4565513 (OS Build 10240.18638)
None None...