CVE-2020-22061

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

Design/Logic Flaw

The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data...

CVE-2020-22061

CVE-2020-22061 affects SUPERAntiSpyware v8.0.0.1050. The issue resides in the driver component saskutil64.sys and permits an attacker with local access to arbitrarily write data to the device via IOCTL 0x9C402140. CVSS data in the record indicates a local, low complexity attack with partial confi...

CVE-2020-22057

CVE-2020-22057 affects EVGA Precision XOC v6.2.7, where WinRin0x64.sys and WinRing0.sys low-level drivers are configured with the default security descriptor, enabling network-adjacent attackers to access sensitive components and data. Root cause is insecure access control on privileged drivers; ...

PT-2021-10722

Name of the Vulnerable Software and Affected Versions EVGA Precision XOC version v6.2.7 Description The issue concerns the configuration of low-level drivers, specifically WinRin0x64.sys and WinRing0.sys, which have a default security descriptor. This configuration allows attackers to access...

PT-2021-10723

Name of the Vulnerable Software and Affected Versions SUPERAntispyware version 8.0.0.1050 Description The issue in the saskutil64.sys component allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140. Recommendations For SUPERAntispyware version 8.0.0.1050, consider disablin...

CVE-2020-22057: Undefined Security Weakness

The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data...

CVE-2020-22061: Undefined Security Weakness

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

Dell DBUtilDrv2.sys Memory Protection Modifier

The Dell DBUtilDrv2.sys drivers version 2.5 and 2.7 have a write-what-where condition that allows an attacker to read and write arbitrary kernel-mode memory. This module installs the provided driver, enables or disables LSA protection on the provided PID, and then removes the driver. This would...

virt:rhel and virt-devel:rhel security update

An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

acme-redirect (>=0.1.0, <=0.4.0), actix-auth (0.1.0) +387 more potentially affected by CVE-2020-36846 +1 more via brotli-sys (>=0.1.2, <=0.3.2)

brotli-sys CARGO version =0.1.2, =0.1.0, =0.1.3, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.3.0, =0.1.0-alpha.1, =0.1.0, =0.1.0-alpha.1, =3.0.0-beta.18 and more Source cves: CVE-2020-36846, CVE-2020-8927 Source advisory: OSV:RUSTSEC-2021-0131...

Fedora: Security Advisory for rust-libsqlite3-sys (FEDORA-2021-3d78d81491)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-libsqlite3-sys (FEDORA-2021-f454d8494c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: rust-libsqlite3-sys-0.23.2-1.fc35

Native bindings to the libsqlite3 library...

[SECURITY] Fedora 34 Update: rust-libsqlite3-sys-0.23.2-1.fc34

Native bindings to the libsqlite3 library...

PT-2021-8174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the thermal component of the Linux kernel. Specifically, when a thermal zone is consuming a thermal sensor and that sensor device...

CVE-2020-22079

Stack-based buffer overflow in Tenda AC-10U AC1200 Router USAC10UV1.0RTLV15.03.06.48multiTDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg...

CVE-2021-1115

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable...

CVE-2021-1117

Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service...

RUSTSEC-2021-0137 sodiumoxide is deprecated

Alternatives may be found - not in any specific order: - libsodium-sys-stable - dryoc - RustCrypto/nacl-compat cryptobox, cryptokx, cryptosecretstream - RustCrypto/xsalsa20poly1305 cryptosecretbox - Signatory - ed25519-compact - ed25519-dalek - ring Recommendations can be also found from: - Aweso...