Lucene search
+L

1935 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/29 12:00 a.m.•4 views

CVE-2021-28690: Undefined Security Weakness

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX the default and preferred option requires selecting a...

6.5CVSS5.8AI score0.01019EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2021/06/19 9:30 p.m.•195 views

FalconEye - Real-time detection software for Windows process injections

FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening real-time. Since FalconEye runs in kernel mode, it provides a stronger and reliable defense against process injection...

7.5AI score
SaveExploits0References11
OSV
OSV
•added 2021/06/11 3:15 p.m.•11 views

ALPINE-CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS7AI score0.00314EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/11 3:15 p.m.•7 views

DEBIAN-CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS7.1AI score0.00314EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/11 3:15 p.m.•8 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS5.5AI score0.00314EPSS
SaveExploits0References3Affected Software1
Xen Project
Xen Project
•added 2021/06/08 5:00 p.m.•64 views

x86: TSX Async Abort protections not restored after S3

ISSUE DESCRIPTION This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX the default and preferred option requires selecting a non-default setting in MSRTSXCTRL. This setti...

6.5CVSS0.01019EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/06/02 12:00 a.m.•15 views

PT-2024-11260

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential memory leak in the DMUB hw init function of the Linux kernel's drm/amd/display module. This leak occurs during suspend/resume scenarios due to the...

9.8CVSS6.2AI score0.17563EPSS
SaveExploits8References424
OSV
OSV
•added 2021/05/31 3:39 p.m.•20 views

UVI-2021-1000014 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•21 views

UVI-2021-1000032 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•24 views

GSD-2021-1000032 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•18 views

GSD-2021-1000014 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/06 12:00 a.m.•20 views

PT-2024-11099 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null dereference error occurs in the Linux kernel when resuming after suspend, even when the interface was not previously enabled. This is caused by the driver queuing work via...

5.5CVSS6.3AI score0.00235EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
•added 2021/04/30 12:00 a.m.•15 views

PT-2024-11060 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the tracing feature. The issue occurred when a fix to the ring buffer recursion detection caused a hung machine during...

9.8CVSS6.5AI score0.08793EPSS
SaveExploits9References2096
Positive Technologies
Positive Technologies
•added 2021/04/21 12:00 a.m.•18 views

PT-2024-11121 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically with the mt76: mt7921 module, where a possible invalid register access can occur. This happens when the interrupt is not properly...

5.5CVSS6.4AI score0.00205EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•16 views

PT-2021-8024 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unbalanced device enable/disable in suspend/resume, caused by the removal of pci enable device mem from ixgbe resume in commit 6f82b2558735. This removal led...

7.8CVSS6.4AI score0.01549EPSS
SaveExploits5References810
CVE
CVE
•added 2021/04/07 7:55 a.m.•67 views

CVE-2020-11246

CVE-2020-11246 describes a double-free condition that can occur when a Snapdragon device enters suspend mode during secure playback across Snapdragon Auto, Compute, Connectivity, and various Snapdragon product lines (Mobile, IoT variants). The root cause is a double-free in the secure playback pa...

8.4CVSS7.6AI score0.00202EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/07 7:55 a.m.•48 views

CVE-2020-11246

A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

8.4CVSS8.4AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/07 12:00 a.m.•6 views

CVE-2020-11246: Double Free

A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

8.4CVSS5.9AI score0.00202EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/11/04 1:30 a.m.•16 views

libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent

A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. A malicious guest-agent may use this flaw to block the libvirt daemon indefinitely, resulti...

5.7CVSS6.8AI score0.00813EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/09/29 7:54 p.m.•20 views

libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent

A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. A malicious guest-agent may use this flaw to block the libvirt daemon indefinitely, resulti...

5.7CVSS6.8AI score0.00813EPSS
SaveExploits0References4
Rows per page
Query Builder