An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request.Read More ...
Continue ReadingSeptember 01, 2022
An infinite loop may be triggered in display_debug_abbrev() function in binutils/dwarf.c while opening a crafted ELF, which may lead to denial of service by a local attacker.Read More ...
Continue ReadingSeptember 01, 2022
A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.Read More ...
Continue ReadingSeptember 01, 2022
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate valida ...
Continue ReadingSeptember 01, 2022
InnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE) vulnerability in the setPlatformAPI function.Read More ...
Continue ReadingSeptember 01, 2022
The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and acc ...
Continue ReadingSeptember 01, 2022
Assertion fail in the display_debug_names() function in binutils/dwarf.c may lead to program crash and denial of service.Read More ...
Continue ReadingSeptember 01, 2022
In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. Thi ...
Continue ReadingSeptember 01, 2022
Back to Main