6988 matches found
Android 7 - 9 VideoPlayer - ihevcd_parse_pps Out-of-Bounds Write
Android 7 - 9 VideoPlayer - ihevcdparsepps Out-of-Bounds Write CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can...
CVE-2019-10121
eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin...
Siemens SINAMICS S150 Converter cabinet unit
Binary data 764679.prm...
Siemens SINAMICS S150 Converter cabinet unit
Binary data 764678.prm...
Siemens SINAMICS S150 Converter cabinet unit
Binary data 764677.prm...
Siemens SINAMICS S150 Converter cabinet unit
Binary data 764680.prm...
Siemens SINAMICS S120 Control Unit CU310-2 PN with PROFINET interface
Binary data 764676.prm...
Design/Logic Flaw
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to...
CVE-2019-6632: Use of Insufficiently Random Values
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to...
XXE Vulnerability
This is: - a bugfix - a new feature - X security Checklist: - X Changes are covered by unit tests - X Code style is respected - X Commit message explains why the change is made see https://github.com/erlang/otp/wiki/Writing-good-commit-messages - X CHANGELOG.md contains a short summary of the...
CVE-2018-17479
Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Systemd unit_deserialize Privilege Escalation
The vulnerability of the unitdeserialize component in Systemd relates to the restoration of a dubious data structure in memory. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to the root level...
New CB LiveOps Release Brings Recommended Queries to Users
Security & IT teams often have no reliable way to check on the current status of their endpoints across their enterprise. This forces these teams to piece together information from multiple management consoles in order to get answers about the health of their entire fleet. Even when they do have...
Kernel: FPU state information leakage via lazy FPU restore
A Floating Point Unit FPU state information leakage flaw was found in the way the Linux kernel saved and restored the FPU state during task switch. Linux kernels that follow the "Lazy FPU Restore" scheme are vulnerable to the FPU state information leakage issue. An unprivileged local attacker cou...
hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)
A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer...
Yokogawa A2NN20 Node Unit Detection
Binary data 760836.prm...
Yokogawa A2NN30 Node Unit Detection
Binary data 760153.prm...
Yokogawa A2NN10 Node Unit Detection
Binary data 760475.prm...