108 matches found
Windows Hyper-V DoS
The vulnerability of the Windows Hyper-V hardware virtualization system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...
Zephyr buffer error vulnerability
Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A buffer error vulnerability exists in Zephyr that stems from a failure of the product's usb device to properly handle memory boundaries. An attacker could cause a buffer overflow through this...
Microsoft Windows Media Center permission and access control vulnerabilities
Windows Media Center WMC is a digital video recorder and media player created by Microsoft.An elevation of privilege vulnerability exists in Microsoft Windows Media Center. An attacker could exploit this vulnerability to elevate privileges...
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
...
CVE-2021-21744
ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the device to be disabled...
FileBrowser cross-site scripting vulnerability
FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser suffers from a cross-site scripting vulnerability that is caused by improper validation of...
VulnCheck KEV: CVE-2019-1225
An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...
Google TensorFlow buffer error vulnerability
Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow 'tf.rawops.SdcaOptimizerV2'. An attacker can exploit this vulnerability to obtain sensitive information...
Windows Hello Face Bypass Security
The vulnerability of the Windows Hello facial recognition component on Microsoft Windows operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to bypass security measures...
Linux kernel Privilege Escalation
The vulnerability of the Linux operating system’s kernel is related to incorrect initialization of process identifiers. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux driver firmware EFI bypass security restrictions
The vulnerability in the driver/firmware/EFI code of the Linux operating system relates to bypassing security functions. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
JunOS DoS
The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures...
DNS Server Service Windows Server DoS
The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
hw: Vector Register Leakage-Active
A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...
Google Chrome Use-After-Free
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Oracle Solaris Kernel Data Access
The vulnerability of the Kernel component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...
hw: Vector Register Leakage-Active
A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...
sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations
A NULL pointer dereference was found in SQLite in the way it executes select statements with column optimizations. An attacker who is able to execute SQL statements can use this flaw to crash the application...
Windows Privilege Escalation
The vulnerability of the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Gold Reward has a flawed logic vulnerability
Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...