6044 matches found
UBUNTU-CVE-2019-14817
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to...
CVE-2018-20999
An issue was discovered in the orion crate before 0.11.2 for Rust. reset calls cause incorrect results...
CVE-2018-20999
An issue was discovered in the orion crate before 0.11.2 for Rust. reset calls cause incorrect results...
Input validation
An issue was discovered in the orion crate before 0.11.2 for Rust. reset calls cause incorrect results...
CVE-2018-20999
An issue was discovered in the orion crate before 0.11.2 for Rust. reset calls cause incorrect results...
Ghostscript -- Security bypass vulnerabilities
Cedric Buissart Red Hat reports: A flaw was found in, ghostscript versions prior to 9.50, in the .pdfhookDSCCreator procedure where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protecti...
SUSE-SU-2019:14146-1 Security update for libvirt and libvirt-python
This update for libvirt and libvirt-python fixes the following issues: libvirt: - CVE-2016-10746: Fixed an authentication bypass where a guest agent with a read only connection could call virDomainGetTime API calls bsc1133150. - rpc: increase the size of REMOTEMIGRATECOOKIEMAX bsc1134783...
CVE-2019-1184
An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...
CVE-2019-1184
An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...
USN-4092-1: Ghostscript vulnerability
Netanel Fisher discovered that the font handler in Ghostscript did not properly restrict privileged calls when '-dSAFER' restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access...
Unspecified vulnerability in cPanel (CNVD-2019-27410)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 58.0.4. An attacker can exploit the vulnerability to perform...
Hackers Could Decrypt Your GSM Phone Calls
Researchers have discovered a flaw in the GSM standard used by AT and T-Mobile that would allow hackers to listen in...
kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests
It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests...
kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests
It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests...
Improper access control
An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthenticated user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially...
CVE-2018-20904
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...
CVE-2018-20904
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...