112 matches found
CVE-2020-0089
creationtimestamp| type| source ---|---|--- 2020-09-18 18:55:15+00:00| seen| https://t.me/cibsecurity/14765...
CVE-2020-0089
CVE-2020-0089 is a localElevation of privilege issue in Android 11, caused by a missing permission check in the audio server. The vulnerability allows escalation of privileges to modify audio settings without extra execution privileges or user interaction. Affected software/module: Android 11 aud...
Important Photon OS Security Update - PHSA-2020-0089
Updates of 'ruby', 'linux-esx', 'linux', 'openldap', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-3.0-0089
Updates of 'linux-esx', 'ruby', 'linux', 'openldap', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory
Summary: Multiple potential security vulnerabilities in Intel® Converged Security & Management Engine Intel® CSME, Intel® Server Platform Services Intel® SPS, Intel® Trusted Execution Engine Interface Intel® TXE, Intel® Dynamic Application Loader Intel® DAL, and Intel® Active Management Technolog...
colegiosolido.com.br Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-992542 Security Researcher DouglasAraujo Helped patch 16 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting colegiosolido.com.br website and its users. Followi...
CVE-2019-0089
creationtimestamp| type| source ---|---|--- 2019-05-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=395...
CVE-2019-0089
Improper data sanitization vulnerability in subsystem in IntelR SPS before versions SPSE504.00.04.381.0, SPSE304.01.04.054.0, SPSSoC-A04.00.04.181.0, and SPSSoC-X04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2019-0089
CVE-2019-0089 affects Intel Server Platform Services (SPS) and related Intel CSME/SPS components. The issue is an improper data sanitization vulnerability in SPS subsystems prior to SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 that may allow...
CVE-2018-0089
The CVE-2018-0089 issue affects Cisco Policy Suite (CPS) PCRF. Affected component: PCRF within CPS. Root cause: incorrect permissions on certain system files, failing to protect sensitive data at rest. Impact: unauthenticated, remote attacker with access to the internal VLAN could request/view in...
CVE-2017-0089
creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41652...
Remote code execution
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Window...
CVE-2017-0089
CVE-2017-0089 affects Microsoft Windows Uniscribe (USP10) used by the Uniscribe font processing path in user32.dll. The vulnerability arises from a memory corruption in USP10!MergeLigRecords, enabling remote code execution when a user visits a crafted web page. Affected platforms listed in the in...
Microsoft Windows Uniscribe CVE-2017-0089 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed explo...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0089)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
MS17-011: Security Update for Microsoft Uniscribe (4013076)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these to execut...
Virtuozzo Linux Errata and Bugfix Advisory 2017:0089
Upstream security update. Follow RHBA-2017-0089 for details...
CVE-2016-0089
This CVE refers to CVE-2016-0089, a Windows Hyper-V Information Disclosure vulnerability. A guest OS user could exploit improper validation of guest input to cause the Hyper-V host to reveal memory information. Affected products include Hyper-V on Windows 8.1, Windows Server 2012 (Gold/R2), and W...
Microsoft Windows Hyper-V CVE-2016-0089 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 for x64-based Systems Microsoft Windows 8.1 for x64-based Syste...
MS16-045: Security Update for Windows Hyper-V (3143118)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists in Hyper-V due to a failure to properly validate input from an authenticated user on a guest operating system. An attacker can exploit...