Lucene search
+L

5940 matches found

Veracode
Veracode
•added 2020/12/06 4:20 a.m.•30 views

Privilege Escalation

intel-microcode is vulnerable to privilege escalation. Allows an local authenticated malicious user to gain elevated privileges on the system, caused by improper conditions check. An attacker could exploit this vulnerability to escalate privileges, obtain confidential information or cause a denia...

5.3CVSS5.1AI score0.00343EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2020/12/06 3:05 a.m.•24 views

Heap Corruption

Failure to check error conditions in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS2.5AI score0.01552EPSS
SaveExploits2References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/04 12:00 a.m.•2 views

CVE-2020-29561: Improper Handling of Exceptional Conditions

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

5.5CVSS5.8AI score0.00654EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/12/03 12:00 a.m.•13 views

The vulnerability of the get_user_pages() function allows a hacker to trigger a service failure.

The vulnerability of the getuserpages function is related to errors during multi-threaded operations race conditions. Exploiting this vulnerability could allow a hacker to cause service failures...

3.6CVSS6.6AI score0.00407EPSS
SaveExploits1References30Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/12/03 12:00 a.m.•12 views

The vulnerability of the kmem_cache_alloc_bulk function (mm/slub.c) in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the kmemcacheallocbulk function in the mm/slub.c file of Linux operating system kernels is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to cause service failures...

7CVSS6.6AI score0.00608EPSS
SaveExploits1References16Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/12/03 12:00 a.m.•12 views

The vulnerability of the do_madvise function (mm/madvise.c) in Linux operating system kernels allows a attacker to cause a service failure.

The vulnerability of the domadvise function in the Linux operating system’s kernel is related to errors during the execution of multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.7AI score0.00402EPSS
SaveExploits1References10Affected Software1
CNNVD
CNNVD
•added 2020/11/24 12:00 a.m.•13 views

PulseAudio Competitive Conditions Issue Vulnerability

PulseAudio is an open source audio system for POSIX OS. The system is primarily used for audio transmission, among other things. PulseAudio suffers from a Competitive Conditions Issue vulnerability in Ubuntu, which can be exploited by attackers to bypass access restrictions on Ubuntu PulseAudio...

4.7CVSS5.8AI score0.00318EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2020/11/20 12:00 a.m.•217 views

Cisco IOS XE Software Packet Filtering Bypass (cisco-sa-cedge-filt-bypass-Y6wZMqm4)

According to its self-reported version, Cisco IOS XE is affected by a packet filtering bypass vulnerability. The vulnerability is due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by crafting a malicious TCP...

7.5CVSS6.7AI score0.01494EPSS
SaveExploits0References3
OSV
OSV
•added 2020/11/12 6:15 p.m.•18 views

CVE-2020-8766

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.5CVSS6.9AI score
SaveExploits0References1
NVD
NVD
•added 2020/11/12 6:15 p.m.•30 views

CVE-2020-8766

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.5CVSS6.5AI score0.00591EPSS
SaveExploits0References1
NVD
NVD
•added 2020/11/12 6:15 p.m.•53 views

CVE-2020-0588

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS6.7AI score0.00351EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•3 views

CVE-2020-8738: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in Intel BIOS platform sample code for some IntelR Processors before may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS5.8AI score0.00336EPSS
SaveExploits0References2
Akamai Blog
Akamai Blog
•added 2020/11/10 2:00 p.m.•87 views

Visualize Visitor Prioritization in Real Time with mPulse

COVID-19 is changing our behavior as we try to avoid person-to-person contact. For example, according to the Google Mobility Report, September 2020 shows an average 23% drop in retail and recreation activity and a 22% drop in workplace traffic in Tokyo compared to a baseline average before COVID-...

6.9AI score
SaveExploits0
OSV
OSV
•added 2020/10/27 3:08 p.m.•8 views

SUSE-SU-2020:3051-1 Security update for xen

This update for xen fixes the following issues: - bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 - bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 - bsc1177413 - VUL-0: CVE-2020-27671: xen: undue...

7.8CVSS6.7AI score0.00415EPSS
SaveExploits0References9
Ubuntu
Ubuntu
•added 2020/10/14 12:08 p.m.•94 views

LSN-0072-1: Kernel Live Patch Security Notice

It was discovered that the F2FS file system implementation in the Linux kernel did not properly perform bounds checking on xattrs in some situations. A local attacker could possibly use this to expose sensitive information kernel memory. CVE-2020-0067 It was discovered that the Serial CAN interfa...

7.8CVSS6.9AI score0.01308EPSS
SaveExploits2
OSV
OSV
•added 2020/10/14 10:08 a.m.•25 views

LSN-0072-1 Kernel Live Patch Security Notice

It was discovered that the F2FS file system implementation in the Linux kernel did not properly perform bounds checking on xattrs in some situations. A local attacker could possibly use this to expose sensitive information kernel memory. CVE-2020-0067 It was discovered that the Serial CAN interfa...

7.8CVSS7.1AI score0.01308EPSS
SaveExploits2References8
OSV
OSV
•added 2020/10/06 7:15 p.m.•16 views

CVE-2020-26599

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

5.3CVSS6.5AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/06 7:15 p.m.•28 views

CVE-2020-26599

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

5.3CVSS0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/06 6:32 p.m.•40 views

CVE-2020-26599

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

5.5AI score0.00328EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/06 12:00 a.m.•2 views

CVE-2020-26599: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...

5.3CVSS5.7AI score0.00328EPSS
SaveExploits0References2
Rows per page
Query Builder