kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.

A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...

Linux ioperm bitmap context switching issues

ISSUE DESCRIPTION Linux 5.5 overhauled the internal state handling for the iopl and ioperm system calls. Unfortunately, one aspect on context switch wasn't wired up correctly for the Xen PVOps case. IMPACT IO port permissions don't get rescinded when context switching to an unprivileged task...

Palo Alto Networks PAN-OS Authorization Issue Vulnerability (CNVD-2020-41540)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An authorization issue vulnerability exists in the Panorama context switching feature of Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability by accessing the Panorama...

CVE-2020-2018

An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue...

February 6, 2018, update for Office 2013 (KB4011700)

February 6, 2018, update for Office 2013 KB4011700 This article describes update 4011700 for Microsoft Office 2013 that was released on February 6, 2018. This update also applies to Office Home and Student 2013 RT. This update has a prerequisite. Be aware that the update in the Microsoft Download...

CVE-2017-18646

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

Security feature bypass

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

openSUSE Security Update : opera (openSUSE-2020-402)

This update for opera fixes the following issues : Update to version 67.0.3575.97 - DNA-84063 Open URL in new tab with Go to web address in search/copy popup and right mouse click context menu - DNA-84780 Search in Search and Copy popup opens tab in wrong position from popup window - DNA-84786...

Exploit for CVE-2019-1458

CVE-2019-1458: Going from 'in the wild report' to POC Intr...

The vulnerability of Linux operating system kernels, related to insufficient input validation and improper implementation of functions, allows attackers to trigger service failures.

The vulnerability of Linux operating system kernels is related to insufficient validation of input data and incorrect implementation of functions. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending location updates via the IAPP protocol,...

CVE-2020-6964

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...

Authentication flaw

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...

CVE-2020-6964

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...

Huawei routers’ vulnerabilities, related to errors in resource release, allow attackers to trigger a device reboot.

The vulnerability of Huawei routers is related to errors in resource release. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a system reboot using specially crafted MPLS packets...

openSUSE: Security Advisory for gdb (openSUSE-SU-2019:2494-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Unspecified Vulnerability in Lava Iris 88 Lite

Lava Iris 88 Lite is a smartphone from Lava India. Lava Iris 88 Lite has an unspecified vulnerability. An attacker can exploit the vulnerability to unauthorized switching of Wi-Fi...

Unspecified Vulnerability in Lava Z81

Lava Z81 is a smartphone from Lava India. Lava Z81 has an unspecified vulnerability. An attacker can exploit the vulnerability to unauthorized switching of Wi-Fi...

Unspecified Vulnerability in Lava Z61 Turbo

Lava Z61 Turbo is a smartphone from Lava India. Lava Z61 Turbo has an unspecified vulnerability. An attacker can exploit the vulnerability to unauthorized switching of Wi-Fi...

openSUSE Security Update : gdb (openSUSE-2019-2494)

This update for gdb fixes the following issues : Update to gdb 8.3.1: jscECO-368 Security issues fixed : - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. bsc1142772 Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version librpm.so.3...

Security update for gdb (moderate)

openSUSE Security Update: Security update for gdb Announcement ID: openSUSE-SU-2019:2493-1 Rating: moderate References: 1115034 1142772 1145692 Cross-References: CVE-2019-1010180 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...