111 matches found
CVE-2020-0116
creationtimestamp| type| source ---|---|--- 2020-06-10 22:55:31+00:00| seen| https://t.me/cibsecurity/12659...
CVE-2020-0116
CVE-2020-0116 is a local information-disclosure issue in Android 10’s System area stemming from a permissions bypass in LocationAccessPolicy.checkSystemLocationAccess, which could bypass user profile isolation and disclose data without extra execution privileges. Affected product: Android (Androi...
Intel® Graphics Driver for Windows* 2019.1 QSR Advisory
Summary: Multiple potential security vulnerabilities in Intel® Graphics Driver for Windows may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0113 Description: Insufficient bounds checking in IntelR...
CVE-2019-0116
CVE-2019-0116 describes an out-of-bounds read in the KMD module of Intel Graphics Driver for Windows, before versions 10.18.14.5067 (15.36.x.5067) and 10.18.10.5069 (15.33.x.5069). A privileged user could cause a denial of service via local access. Affected products include Intel Graphics Driver ...
Intel Graphics Driver for Windows Vulnerabilities - Lenovo Support US
No description provided...
Security Bulletin: IBM Platform Symphony (CVE-2014-0094, CVE-2014-0112, CVE-2014-0113, CVE-2014-0116)
Summary Several security vulnerabilities have been reported against Apache Struts 2 through May 2014. IBM Platform Symphony’s GUI uses Struts 2 as a framework for Java web applications. A version of the package that is vulnerable to these issues is included in several past versions of IBM Platfor...
CVE-2018-0116
CVE-2018-0116 describes an authentication bypass in Cisco Policy Suite’s RADIUS module. An unauthenticated, remote attacker could be authorized as a subscriber without a valid password, provided a valid username is used, due to incorrect RADIUS user credential validation. Affected are Cisco Polic...
Important: Red Hat Security Advisory: rh-eclipse46-jackson-databind security update
An update for rh-eclipse46-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Oracle Mysql Security Updates (jan2012-366304) 01 - Linux
Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-0116
creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41655...
CVE-2017-0123
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...
Information disclosure
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...
Information disclosure
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...
CVE-2017-0116
CVE-2017-0116 is an Uniscribe Information Disclosure vulnerability affecting Microsoft Windows with the Uniscribe component (usp10.dll) used via DrawText/UI paths. The flaw, described as a memory disclosure in Uniscribe when handling TrueType/OpenType font data from untrusted sources, is triggere...
MS17-011: Security Update for Microsoft Uniscribe (4013076)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these to execut...
Mageia: Security Advisory (MGASA-2016-0116)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-0116
CVE-2016-0116 concerns a memory corruption vulnerability in Microsoft Edge exploitable via a crafted web site. The connected CNVD entries corroborate a remote memory corruption flaw in Edge that could allow arbitrary code execution in the context of the current user. The CNVD descriptions identif...
CVE-2015-0116
CVE-2015-0116 affects IBM Leads versions including 7.x, 8.1.0 up to 8.1.0.14, 8.2, 8.5.0 up to 8.5.0.7.3, 8.6.0 up to 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 up to 9.1.0.6.1, and 9.1.1 up to 9.1.1.0.2. The issue is a CSRF risk caused by improper restriction of link additions, enabling remote auth...
MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities
According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by multiple vulnerabilities : - A flaw exists within 'MultipartStream.java' in Apache Commons FileUpload when parsing malformed Content-Type headers. A remote attacker, using a crafted...
F5 Networks BIG-IP : Multiple MySQL vulnerabilities (K14410)
For BIG-IP systems using the MySQL database, the following MySQL vulnerabilities may allow local users to gain knowledge of sensitive information, manipulate certain data, or cause a Denial of Service DoS:CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112...