Google Chrome Information Disclosure Vulnerability (CNVD-2019-36922)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.120. The vulnerability can be exploited by an attacker to obtain sensitive information with the help of a specially crafted website...

CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

PT-2019-6450 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an integer overflow vulnerability in the filter prewitt function located in the libavfilter/vf convolution.c file. This vulnerability can be exploited by attackers to cause a Denial of...

About the security content of Swift 5.1.1 for Ubuntu - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Unspecified Vulnerability in NVIDIA Shield TV Experience

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A security vulnerability exists in the bootloader of the NVIDIA Tegra software in NVIDIA Shield TV Experience version 8.0.1, which originates from the program's failure to validate fields in the...

About the security content of Swift 5.1.1 for Ubuntu

About the security content of Swift 5.1.1 for Ubuntu This document describes the security content of Swift 5.1.1 for Ubuntu. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

NVIDIA Shield TV Experience Buffer Overflow Vulnerability

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A buffer overflow vulnerability exists in the NVIDIA Tegra bootloader in NVIDIA Shield TV Experience versions prior to 8.0.1, which originates from an incorrect boundary check performed by the...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to process-interaction errors (IPC errors). These vulnerabilities allow attackers to exploit them to disclose sensitive information.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to process-interaction errors. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information...

The vulnerabilities of the Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by a numerical overflow condition that allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information through...

The vulnerability of Intel microprocessor microprogramming software arises from synchronization errors when using shared resources, allowing attackers to disclose protected information.

The vulnerability of Intel microprogramming software arises from synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

CVE-2019-12681

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

The vulnerability of the fly-admin-freeipa-server graphical tool for running the FreeIPA service on the Astra Linux operating system involves disclosing information through registration files. This allows a perpetrator to access confidential data and compromise its integrity.

The vulnerability of the fly-admin-freeipa-server graphical tool for running the FreeIPA service on the Astra Linux operating system is related to an error in the handling of options when creating and deleting domains, as well as errors in the handling of restart information. Exploiting this...

Apple iOS Quick Look component authorization issue vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Quick Look is a component for viewing frequently used resource files. An authorization issue vulnerability exists in the Quick Look component in Apple iOS versions prior to 13, which can be exploited by an attacker to disclose...

Deserialization of untrusted data

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party...

CVE-2019-9399

The Print Service is susceptible to man in the middle attacks due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-11563566...

CVE-2019-9353

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123024201...

CVE-2019-9296

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112162089...

The embedded software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is vulnerable due to insufficient testing of input data. This vulnerability allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, expose sensitive information, or cause system failures...

The vulnerability of the SEMA driver in the Intel Computing Improvement Program allows a hacker to enhance their privileges, disclose protected information, or cause service failures.

The vulnerability of the SEMA driver for data collection in the Intel Computing Improvement Program is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...