Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DOS attacks. This is due to mishandling of inheritance of the sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel. Local users could cause a denial of service or possibly have unspecified other impact via crafted system calls...

Out-Of-Bounds Read

Linux kernel is vulnerable to out-of-bounds reads. This is because the IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option. Local users could cause a denial of service or possibly have unspecified other impact via...

Privilege Escalation

Linux kernel is vulnerable to privilege escalation attacks. There exist a race condition in kernel/events/core.c in the Linux kernel. Local users could gain privileges via a crafted application that makes concurrent perfeventopen system calls for moving a software group into a hardware context...

Denial Of Service (DOS)

Linux kernel is vulnerable to the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls. Local users could cause an application crash via a crafted application that makes sendto system calls, related...

Information Disclosure

kernel-rt is vulnerable to information disclosure. Failure to initialize certain data structure in the dotkill function in kernel/signal.c allows a local user to retrieve confidential information from the kernel memory via a malicious application with tkill and tgkill system calls...

Arbitrary Code Execution

Oracle Java SE is vulnerable to arbitrary code execution attacks. Remote unauthenticated attackers could execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager...

The vulnerability of the Windows operating system, related to errors in handling driver calls for LUAFV, allows a perpetrator to circumvent the User Mode Code Integrity Control (UMCI) policy.

The vulnerability of the Windows operating system is related to the improper handling of calls to the driver luafv.sys. Exploiting this vulnerability allows an attacker to circumvent the User Mode Code Integrity Policy UMCI by using a specially created application...

0 day: a detailed analysis of the macOS platform Shimo VPN Multiple privilege elevation vulnerability-vulnerability warning-the black bar safety net

One, overview The Cisco Talos team recently disclosed Shimo VPN help tool Helper Tool a series of holes. Shimo VPN is the macOS platform a very popular VPN client that can in one application to connect multiple VPN accounts. These particular vulnerabilities were in the help tool, this is the Shim...

CVE-2016-10746

libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886...

CVE-2016-10746

libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886...

Apple iOS < 12.1.4 Multiple Vulnerabilities (APPLE-SA-2019-2-07-1)

Binary data 700557.prm...

CVE-2019-0836

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841...

CVE-2019-0732

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Security Feature Bypass Vulnerability'...

CVE-2018-15631

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request...

Open-Xchange (OX) App Suite Access Control Vulnerability (Bug ID 61315)

Open-Xchange OX App Suite is prone to an access control vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

DEBIAN-CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

PT-2019-1847 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling driver calls in the LUAFV driver luafv.sys of the Windows operating system. Exploitation of this issue may allow a remote attacker to execute...

CVE-2018-4399

An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4399

An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4399

An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...