114 matches found
CVE-2017-0990
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
SUSE CVE-2005-0990
unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0990,...
CVE-2022-0990
Calibre-Web (janeczku/calibre-web) is affected by a Server-Side Request Forgery (SSRF) vulnerability disclosed as CVE-2022-0990 in versions before 0.6.18. The issue is evidenced across multiple sources (NVD, Red Hat, Veracode, Huntr, CVE listings) describing SSRF in this project. Veracode notes t...
CVE-2022-0990 Server-Side Request Forgery (SSRF) in janeczku/calibre-web
Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...
CVE-2021-0990
In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...
CVE-2021-0990
CVE-2021-0990 concerns an information-disclosure flaw in Android 12 via getDeviceId in PhoneSubInfoController.java. The issue allows determining whether an app is installed without query permissions, via a side-channel, leading to local information disclosure without extra execution privileges; u...
SUSE: Security Advisory (SUSE-SU-2018:0990-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : firefox (CESA-2021:0990)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:0990 advisory. - Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read CVE-2021-23981 - Mozilla: Internal network hosts could have...
Oracle Linux 8 : firefox (ELSA-2021-0990)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0990 advisory. 78.9.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.9.0-1 - Update to 78.9.0...
Information disclosure
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0990...
CVE-2019-0990
Technical details for CVE-2019-0990 are not provided in the connected documents. Monitor for updates from official advisories.
Microsoft Windows Multiple Vulnerabilities (KB4503291)
This host is missing a critical security update according to Microsoft KB4503291 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-0990)
An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980,...
CVE-2018-0990
Mode C: CVE-2018-0990 is a ChakraCore/Edge remote code execution vulnerability described as memory corruption in the Chakra scripting engine when handling objects in memory. Affected products include Microsoft Edge and ChakraCore. The root cause is in the engine’s memory handling, enabling arbitr...
KLA11222 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via...
Microsoft ChakraCore Scripting Engine CVE-2018-0990 Remote Memory Corruption Vulnerability
Description Microsoft ChakraCore is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore...
