14514 matches found
CVE-2019-15394
CVE-2019-15394 concerns the Asus ZenFone 5 Selfie (ASUS_X017D_1, Android 7.1.1). A pre-installed app with package name com.asus.atd.smmitest (versionCode 1, versionName 1) enables unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app ...
CVE-2019-15394
The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WWPhone/ASUSX017D1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app versionCode=1, versionName=1 that allows unauthorized wireless settin...
CVE-2019-15393
The Asus ZenFone Live Android device with a build fingerprint of asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app versionCode=1, versionName=1 that allows unauthorized wireless settings...
CVE-2019-15393
The CVE-2019-15393 entry concerns Asus ZenFone Live devices where a pre-installed app (com.asus.atd.smmitest, versionCode=1, versionName=1) permits unauthorized wireless settings modification via a confused-deputy attack. The flaw is triggered by any app co-located on the device and represents a ...
CVE-2019-15744
The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyakisoftbank/keyakisoftbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app versionCode=1413005, versionName=1.3.0 that allows unauthoriz...
CVE-2019-15744
CVE-2019-15744 concerns a Sony Xperia XZs running Android 7.1.1 with build fingerprint Sony/keyaki_softbank/keyaki_softbank. A pre-installed app (package: jp.softbank.mb.tdrl, versionCode 1413005, versionName 1.3.0) on the device allows unauthorized wireless settings modification through a confus...
Ubuntu 16.04 LTS : Linux kernel vulnerability (USN-4186-3)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4186-3 advisory. USN-4186-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was...
Ubuntu 18.04 LTS : Linux kernel vulnerability and regression (USN-4184-2)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4184-2 advisory. USN-4184-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was...
V-Zug Combi-Steam MSLQ Authorization Issues Vulnerability
The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...
USN-4185-2: Linux kernel (Azure) vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
USN-4185-1: Linux kernel vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2953-1)
The SUSE Linux Enterprise 15-SP1 Azure Kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine...
SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2946-1)
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception...
Intel PROSet/Wireless WiFi Software Multiple Security Vulnerabilities
Description Intel PROSet/Wireless WiFi Software is prone to multiple security vulnerabilities. A local attacker can leverage these issues to gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Versions prior to Intel PROSet/Wireless WiFi Software 21.40 ar...
Intel® WIFI Drivers and Intel® PROSet/Wireless WiFi Software extension DLL Advisory
Summary: A potential security vulnerability in Intel® WIFI Drivers and Intel® PROSet/Wireless WiFi Software extension DLL may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing driver updates to mitigate these potential vulnerabilities. Vulnerability...
Intel WIFI Drivers and PROSet/Wireless WiFi Software Multiple Memory Corruption Vulnerabilities
Description Intel WIFI Drivers and PROSet/Wireless WiFi Software are prone to multiple memory-corruption vulnerabilities. A local attacker can leverage these issues to gain elevated privileges, gain sensitive information and cause denial-of-service conditions. Intel WIFI Drivers and PROSet/Wirele...
Intel Releases Security Updates
Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...
HPSBHF03639 rev. 4 - Intel WIFI Drivers and Intel PROSet/Wireless WiFi Software Security Advisory
Potential Security Impact Escalation of privilege, denial of service, or information disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities have been identified with Intel WIFI Drivers and Intel...
The vulnerability of the Wireless sub-component of the Oracle Field Service component in the Oracle E-Business Suite automation system for enterprise operations allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.
The vulnerability of the Wireless component of the Oracle Field Service system, a part of the Oracle E-Business Suite, relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly...