4418 matches found
Code injection
While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...
CVE-2019-19339
It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure...
CVE-2020-7048
The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state deleting all site content stored in that table, as demonstrated by a wp-admin/admin-post.php?db-reset-tables=comments...
Design/Logic Flaw
The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state deleting all site content stored in that table, as demonstrated by a wp-admin/admin-post.php?db-reset-tables=comments...
The first Zbrunk dashboard and other news
The long New Year holiday season in Russia was not in vain. I had time to work on Zbrunk. As you can see, I made my first dashboard and added other features. No more timestamps in code I added functions to get Unix timestamps from lines in human-readable time format, e.g. "2019.12.10 13:00:00"...
Security Bulletin: IBM i is affected by an OSPF vulnerability (CVE-2017-1460)
Summary IBM i OSPF is affected by this security vulnerability. IBM i has addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1460 DESCRIPTION: IBM i OSPF is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of...
sqlite: dropping of shadow tables not restricted in defensive mode
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...
Xen Denial of Service Vulnerability (CNVD-2020-07292)
Xen is an open source virtual machine monitor product. A denial of service vulnerability exists in Xen 4.12. and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via a concatenated chain of linear page tables...
The vulnerability of the Intel i915 graphics driver of Intel microcomputer software allows a hacker to alter the entries in the memory page table by manipulating MMIO (Memory-Mapped Input Output) operations, thereby increasing their privileges.
The vulnerability of the Intel i915 graphics driver in Intel microprogrammed software processors is related to the lack of security checks in the copy-to-memory instructions for bit arrays. Exploiting this vulnerability allows an attacker to alter memory page tables by manipulating MMIO...
Fedora 29 : mingw-libidn2 (2019-28d3cd20c0)
Libidn 2.3.0 released 2019-11-14 ================================== - Mitre has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 commit 241e8f48 - Update the data tables from Unicode 6.3.0 to Unicode 11.0 - Turn idn2punycodeencode, idn2punycodedecode into compa...
Amazon Linux 2 : kernel (ALAS-2019-1366)
A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor,...
USN-4185-3 linux, linux-hwe, linux-oem vulnerability and regression
USN-4185-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was incomplete on 64-bit Intel x86 systems. Also, the update introduced a regression that broke KVM guests where extended page tables EPT are...
CVE-2018-12207
Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to potentially enable denial of service of the host system via local access...
The vulnerability of the bgpd daemon in the Quagga software package, which allows a hacker to induce a service failure.
The vulnerability of the bgpd daemon in the Quagga software package is related to errors in processing internal BGP translation tables as strings. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
November 5, 2019, update for Office 2016 (KB4475588)
None None...
wpDataTables <= 2.0.7 - XSS & SQL Injection
The wpDataTables – Tables & Table Charts WordPress plugin was affected by a XSS & SQL Injection security vulnerability...
CVE-2015-9401
The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php editstyle id XSS...
Cross site scripting
The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php editstyle id XSS...
CVE-2015-9401
The CVE-2015-9401 entry concerns the WordPress websimon-tables plugin up to version 1.3.4, which is vulnerable to an XSS flaw in wp-admin/tools.php edit_style id. Connected sources describe it as an Authenticated Reflected Cross-Site Scripting (XSS) vulnerability affecting Websimon Tables