kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.

A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...

kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.

A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...

Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM SmartCloud Entry (CVE-2014-8121)

Summary IBM SmartCloud Entry is vulnerable to GNU C library glibc vulnerabilities. Remote attackers can exploit them to cause the application to enter into an infinite loop. Vulnerability Details CVEID: CVE-2014-8121 DESCRIPTION: GNU C Library glibc is vulnerable to a denial of service, caused by...

Huawei Data Communication: DoS Vulnerability in Some Huawei Switch Products (huawei-sa-20180103-01-switch)

There is a denial of service DoS vulnerability in Some Huawei switch products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

expat: heap-based buffer over-read via crafted XML input

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read...

CVE-2020-10766

A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...

UBUNTU-CVE-2020-10766

A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced...

A brief history of video game saves and data modification

Games consoles and handhelds have always been an interesting battleground for hacking activities. The homebrew scene for using hardware in interesting ways has a long and varied history, especially where porting games to run on different platforms is concerned. Tampering with games while playing...

Huawei CloudEngine 6800 and Huawei CloudEngine 12800 Denial of Service Vulnerabilities

Huawei CloudEngine 6800 and Huawei CloudEngine 12800 are both products of Huawei, China.CloudEngine 6800 is a 6800 series 10GbE switch for data centers.Huawei CloudEngine 12800 is a 12800 series data center switch. Huawei CloudEngine 12800 is a 12800 series data center switch. A security...

Huawei Data Communication: Improper Authorization Vulnerability on Huawei Switch Products (huawei-sa-20180328-01-authentication)

There is an improper authorization vulnerability on Huawei switch products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Cross-site Scripting (XSS)

intelliants/subrion is vulnerable to cross-site scripting XSS. The vulnerability exists in the /panel/configuration/general page where the value of vlanguageswitch in multipart/form-data is improperly handled...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2020-32356)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in the /panel/configuration/general settings page in Subrion CMS version...

PAN-OS: Panorama context switch session cookie disclosure

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama versio...

Intelbras CIP 92200 Cross-Site Request Forgery Vulnerability

Intelbras CIP 92200 is a VoIP switch from Intelbras Poland. A cross-site request forgery vulnerability exists in the Intelbras CIP 92200 that stems from the program failing to properly validate user input. A remote attacker could use this vulnerability to access the panel and perform capture...

Linux kernel memory leak vulnerability (CNVD-2020-37936)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory leak vulnerability exists in the 'gssmechfree' function of the net/sunrpc/authgss/gssmechswitch.c file in Linux kernel 5.6.10 and earlier, which can be...

KLA11788 Multiple vulnerabilities in Mpmtp installer

Absolutely unique vulnerability was found in mpmtp system installer. Vulnerability can be exploited different ways, but the easiest way is running installer with /dos switch which leading to a blue screen of death and the need to reinstall Windows due to a failure of the system kernel driver. Thi...

Multiple NETGEAR Product Input Validation Error Vulnerabilities (CNVD-2021-59163)

The NETGEAR XS512EM is a switch, the NETGEAR XS724EM is a switch, and the NETGEAR GS810EMX is an Ethernet switch. A security vulnerability exists in multiple NETGEAR products. An attacker could exploit this vulnerability to cause a denial of service...

NETGEAR GS810EMX Information Disclosure Vulnerability

The NETGEAR GS810EMX is an Ethernet switch from NETGEAR. A security vulnerability exists in the NETGEAR GS810EMX prior to version 1.0.0.5. An attacker could exploit the vulnerability to obtain sensitive information...

Elevation of Privilege Vulnerability in Multiple NETGEAR Products (CNVD-2021-67654)

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products. An attacker could exploit the vulnerability to elevate privileges...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2021-59152)

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A cross-site scripting vulnerability exists in several NETGEAR products. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execu...