CVE-2019-5673

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

OPENSUSE-SU-2019:1106-1 Security update for python-azure-agent

This update for python-azure-agent fixes the following issues: - CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. bsc1127838 This update was imported from the SUSE:SLE-15:Update update project...

Capital One: Heartbleed Bug

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over th...

SUSE-SU-2019:0603-1 Security update for python-azure-agent

This update for python-azure-agent fixes the following issues: - CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. bsc1127838...

CVE-2018-1675

CVE-2018-1675 concerns IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.2 and 7.3. The issue arises because password hashes can be exposed in memory on target Windows systems discovered by TADDM, due to WMI credential caching and shared service account behavior. Attack pat...

CVE-2018-1675

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110...

CVE-2019-1669

The CVE-2019-1669 issue affects Cisco Firepower Threat Defense (FTD) Software, specifically the data acquisition (DAQ) component. It describes an unauthenticated remote attacker who can bypass configured access control policies or cause a DoS by exploiting improper memory management during traffi...

Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...

CVE-2018-15453

A vulnerability in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an affected device to corrupt...

CVE-2018-14852

Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...

CVE-2018-14852

CVE-2018-14852 concerns the Samsung Galaxy S6 SM-G920F with the bcmdhd4358 Wi‑Fi driver. The issue is an out-of-bounds array access in the dhd_rx_frame function (drivers/net/wireless/bcmdhd4358/dhd_linux.c) caused by improper validation of the network interface index reported by the Wi‑Fi chip fi...

CVE-2018-14852: Improper Restriction of Operations within the Bounds of a Memory Buffer

Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...

GHSA-7XFP-9C55-5VQJ Remote Memory Exposure in request

Affected versions of request will disclose local system memory to remote systems in certain circumstances. When a multipart request is made, and the type of body is number, then a buffer of that size will be allocated and sent to the remote server as the body. Proof of Concept js var request =...

Race condition

A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails to releas...

CVE-2018-0455

The CVE-2018-0455 issue affects Cisco Firepower System Software (Detection Engine) with SMBv2/v3 header validation errors that allow unauthenticated remote exploitation to exhaust system memory and disrupt SNORT, potentially blocking traffic forwarding. Affected component: SMB processing in Cisco...

Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

A vulnerability in the Server Message Block Version 2 SMBv2 and Version 3 SMBv3 protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. ...

Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails to releas...

The vulnerability of the Windows operating system’s kernel driver, caused by errors in memory object handling, allows a hacker to gain access to system memory contents.

The vulnerability of the kernel driver driver bowser.sys is caused by errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to system memory contents...

MGASA-2018-0344 Updated microcode packages fix security vulnerabilities

This microcode update provides the Intel 20180807 microcode release that adds the processor microcode side of fixes and mitigations for the now publically known security issue affected Intel processors called L1 Terminal Fault L1TF for most Intel processors since Intel Core gen2: Systems with...

Design/Logic Flaw

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service DoS condition on an affected system. The vulnerability exists because the affected...