89 matches found
CVE-2020-0560
CVE-2020-0560 affects the Intel Renesas Electronics USB 3.0 Driver (all versions). The root cause is improper permissions in the installer, enabling an authenticated local user to potentially escalate privileges. Intel issued a product discontinuation and recommends uninstalling the driver. The a...
Microsoft Office Information Disclosure (CVE-2019-0560)
An information disclosure vulnerability exists in a component of Microsoft Office. This vulnerability is due to improper handling of an object. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...
CVE-2019-0560
creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402...
CVE-2019-0560
This CVE-2019-0560 entry concerns a memory-based information disclosure in Microsoft Office and Office 365 ProPlus. Affected products are Microsoft Office components; root cause is improper handling of memory contents, enabling disclosure of sensitive data. Documented impact is information disclo...
Security Updates for Microsoft Office Products (January 2019)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the context of the current...
KLA11396 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
CVE-2018-0560
Hatena Bookmark App for iOS (versions 3.0–3.70) contains an address bar spoofing vulnerability. A remote attacker could forge the address bar contents, potentially enabling phishing-like deception. Affected component: iOS app UI/URL display logic; root cause described as an address bar spoofing f...
CVE-2006-0560
CVE-2006-0560 is rejected and not a valid vulnerability entry.
CVE-2017-0560
CVE-2017-0560 is an information-disclosure vulnerability in the Android factory reset process that could allow a local attacker to access data from the previous owner. The NVD description lists affected Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1, with Android ID A-30681079. ...
CVE-2017-0560
An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue is rated as Moderate due to the possibility of bypassing device protection. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545,...
CVE-2016-0560
Technical details for CVE-2016-0560 are not publicly provided in the supplied documents; additional specifics (affected product scope, root cause, or remediation) are not available here. Monitor for official advisories.
Oracle: Security Advisory (ELSA-2014-0560)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-0560
The dissectwccp2r1addresstableinfo function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service application crash via a crafted...
DEBIAN-CVE-2015-0560
The dissectwccp2r1addresstableinfo function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service application crash via a crafted...
CVE-2015-0560
CVE-2015-0560 affects Wireshark’s WCCP dissector. The vulnerability arises in dissect_wccp2r1_address_table_info where certain data structures are not initialized, enabling remote crafted packets to crash the application (DoS). Affected are Wireshark 1.10.x prior to 1.10.12 and 1.12.x prior to 1....
KLA10453 Multiple vulnerabilities in Wireshark
Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. These vulnerabilities can be exploited via a specially designed packet. Original advisories - Related products Wireshark CVE list CVE-2015-0564 warning...
CVE-2014-0560
CVE-2014-0560: A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and macOS. The issue allows arbitrary code execution via unspecified vectors and is disclosed in conjunction with multiple vulnerabilities (e.g., CVE-2014-0561, CVE-201...
Adobe Acrobat < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)
The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.12 / 11.0.09. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows arbitrary code execution. CVE-2014-0560 - A heap-based buffer overflow exists that allows...