1705 matches found
CVE-2020-7512
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to exploit the component...
Linux kernel Linux scheduler logic flaw vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the U.S. Linux scheduler is one of the process scheduling applications. A security vulnerability exists in Linux scheduler in Linux kernel. An attacker can exploit the vulnerability to...
Google Android Kernel Airbrush Resource Management Error Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, of which Kernel Airbrush is a kernel image processing plug-in. The Google Android Kernel Airbrush resource management error vulnerability can be exploited by an attacker to elevate privileges...
Cisco 809 Industrial ISRs, 829 Industrial ISRs, and Cisco CGR1000 IOS Software Trust Management Issue Vulnerabilities
Cisco 1000 Series Connected Grid Routers CGR1000 is a 1000 Series Internet Grid Router from Cisco. A trust management issue exists in the virtual console authentication of the IOS Software in Cisco 809 Industrial ISRs, 829 Industrial ISRs, and Cisco CGR1000. The vulnerability stems from the...
Google Android Framework Privilege Bypass Vulnerability (CNVD-2020-46321)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A security vulnerability exists in Framework in Android version 10. An attacker can exploit the vulnerability to elevate privileges...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2020-6483
Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
LSN-0067-1 Kernel Live Patch Security Notice
It was discovered that the Serial CAN interface driver in the Linux kernel did not properly initialize data. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-11494...
IBM Spectrum Scale Denial of Service Vulnerability (CNVD-2020-30675)
IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...
Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2020-31707)
Kingsoft PDF Reader is a PDF reading tool. A denial of service vulnerability exists in Kingsoft PDF Reader. An attacker can exploit this vulnerability to cause a denial of service...
Lucky9io has a logic flaw vulnerability
Lucky9io is an ethereum-based virtual gambling game.A security vulnerability exists in Lucky9io's implementation of a simple lotto smart contract, which stems from the use of a fallback function to generate random values using the publicly readable variable entrynumber. An attacker could exploit...
Logic Flaw Vulnerability in GOAL Bonanza
GOAL Bonanza GOAL is an ethereum-based virtual currency.A security vulnerability exists in the 'mintToken' function in GOAL's smart contract implementation. An attacker could exploit the vulnerability to increase the balance of a digital asset at any address...
Logic Flaw Vulnerability in SpeedCashLite
SpeedCashLite SCSL is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SCSL. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
FIBToken has a flawed logic vulnerability
FIBToken FIB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of FIB. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Denial of Service Vulnerability in Multiple NETGEAR Products (CNVD-2021-28036)
NETGEAR SRX5308 and others are products of NETGEAR, Inc.NETGEAR SRX5308 is a VPN firewall device.NETGEAR FVS336G is a VPN virtual private network firewall router.NETGEAR FVS318N is a VPN virtual private network firewall Router. A security vulnerability exists in multiple NETGEAR products. An...
TongTong Coin Logic Flaw Vulnerability
TongTong Coin TTCoin is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in TTCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
OpenSSL Code Issues Vulnerabilities
OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. The product supports a variety of cryptographic algorithms , including symmetric ciphers , hash algorithms ,...
Micro Focus Enterprise Server and Enterprise Developer Insufficient Credential Protection Vulnerability
Micro Focus Enterprise Server and Micro Focus Enterprise Developer are both products of Micro Focus, a British company.Micro Focus Enterprise Server is an enterprise server. Micro Focus Enterprise Server is an enterprise server that provides a deployment environment for mainframe applications.Mic...
Design/Logic Flaw
SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...
