210 matches found
CVE-2022-36289
Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-34346
Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-13241 · Unknown · Automotive
Name of the Vulnerable Software and Affected Versions: Automotive affected versions not specified Description: The issue is related to memory corruption in Automotive systems due to an integer overflow that leads to a buffer overflow. This occurs when registering a new listener with a shared...
CVE-2022-26148
An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the apijsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in...
CVE-2021-34342
Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVarN in decompile.c which causes a huge information leak...
The vulnerability of the CLI component of Cisco SD-WAN microprogramming software allows a hacker to execute arbitrary commands with root user privileges.
The vulnerability of the CLI component of Cisco SD-WAN software microprogramming systems exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root user privileges...
CVE-2021-28696
IOMMU page mapping issues on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresse...
HPE iLO Amplifier Pack Remote Code Execution Vulnerability
HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...
Unauthorized Access Vulnerability in Multiple BOSCH Systems
bosch generally refers to Bosch. Bosch is one of Germany's industrial companies engaged in the industries of automotive and intelligent transportation technology, industrial technology, consumer goods, and energy and building technology. An unauthorized access vulnerability exists in several BOSC...
The vulnerability of the Windows Speech Runtime component in operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Speech Runtime component in operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Unauthorized Access Vulnerability in Multiple Systems of Anhui Huanmei Intelligent Technology Co.
Anhui Huanmei Intelligent Technology Co., Ltd hereinafter referred to as "Huanmei Intelligent", founded on May 11, 2007, is a national high-tech enterprise specializing in environmental Internet of Things, environmental protection informationization, intelligent data collection and other...
Unspecified Vulnerability in Treck TCP/IP TCP Component
Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. A security vulnerability exists in the Treck TCP/IP TCP component. The vulnerability stems from a failure of the program to properly handle differences...
Special Register Buffer speculative side channel
ISSUE DESCRIPTION This issue is related to the MDS and TAA vulnerabilities. Please see https://xenbits.xen.org/xsa/advisory-297.html MDS and https://xenbits.xen.org/xsa/advisory-305.html TAA for details. Certain processor operations microarchitecturally need to read data from outside the physical...
The vulnerability of the kernel of operating systems such as Linux, Windows, Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, macOS, and EulerOS allows attackers to increase their privileges.
The vulnerability of the kernels of Linux, Windows, Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, macOS, and EulerOS is related to errors in interpreting instructions that describe behavior related to MOV SS/POP SS. Exploiting this vulnerability can allow attackers to gain increased...
Pentagon Expands Bug-Bounty Program to Include Physical Systems
The Department of Defense is expanding its “Hack the Pentagon” bug-bounty program to include hardware assets, tapping the Synack, HackerOne and Bugcrowd platforms to attract more white hats to the effort. The news comes two weeks after the Government Accountability Office GAO released a report...
Cisco IOS/IOS XE SSHv2 Body Authentication Bypass Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS and IOS XE Software have a security vulnerability in the implementation of the SSHv2 protocol. A remote attacker could exploit this vulnerability to bypass the user...
Debian top - Format String
Debian top - Format String source: https://www.securityfocus.com/bid/1895/info top is a program used to display system usage statistics in real time written by GoupSys Consulting but shipped by default as a core component with many operating systems. On BSD systems, top is installed setgid kmem s...
[NGSEC-2004-7] NtRegmon, local system denial of service.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: NtRegmon, local system denial of service. ID: NGSEC-2004-7 Application: NtRegmon http://www.sysinternals.com/ntw2k/source/regmon.shtml Date: 14/Aug/2004 Status: Patche...