CVE-2020-0140

In rwi93smdetectndef of rwi93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

CVE-2020-0140

CVE-2020-0140 relates to Android 10 and is described in multiple sources as an information-disclosure vulnerability due to a missing bounds check in rw_i93_sm_detect_ndef of rw_i93.c. The underlying issue can enable remote information disclosure without extra execution privileges and without user...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:0140-1)

This update for java-11-openjdk fixes the following issues : Update to version jdk-11.0.6-10 January 2020 CPU, bsc1160968 Fixing these security related issues : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization...

CVE-2019-0140

CVE-2019-0140 is a buffer overflow in firmware for Intel Ethernet 700 Series Controllers affecting Citrix ADC/ Gateway platforms. The issue can enable privilege escalation for an unauthenticated attacker with Layer 2 access to the device, via adjacent access on affected MPX/SDX configurations. Ci...

Beckhoff CX2040-0140 Industrial Computer Detection

Binary data 763745.prm...

Beckhoff CX5120-0140 Industrial Computer Detection

Binary data 763606.prm...

Beckhoff CX5130-0140 Industrial Computer Detection

Binary data 763625.prm...

Beckhoff CX2030-0140 Industrial Computer Detection

Binary data 763726.prm...

Important Photon OS Security Update - PHSA-2018-0140

Updates of 'libmspack' packages of Photon OS have been released...

CVE-2018-0140

The CVE-2018-0140 issue affects Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (CSMA). It stems from a lack of verification of authenticated user accounts, enabling an authenticated remote attacker to download arbitrary messages from the spam quarantine by mo...

CVE-2004-0140

...

CVE-2012-0140

CVE-2012-0140 is rejected/not used and does not represent an active vulnerability entry.

CVE-2004-0140

CVE-2004-0140 is rejected/not used and does not represent an active vulnerability entry.

CVE-2012-0140

...

CVE-2017-0140

Technical details for CVE-2017-0140 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

Microsoft Edge Security Feature Bypass (MS17-007: CVE-2017-0140)

Security feature bypass exists in Microsoft Edge. The vulnerability is due to a breach in the way Microsoft Edge implements SOP Same Origin Policy for HTML elements present in other browser windows. A remote attacker could exploit this vulnerability by enticing a user to visit a maliciously craft...

Microsoft Edge Fetch API Arbitrary Header Setting

------------------------------------------------------------------------ Microsoft Edge Fetch API allows setting of arbitrary request headers ------------------------------------------------------------------------ Yorick Koster, January 2017...

KLA10968 Multiple vulnerabilities in Microsoft Edge

Multiple serious vulnerabilities have been found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An incorrect handling of...

Microsoft Edge CVE-2017-0140 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

CVE-2016-0140

Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...