Lucene search
+L

779 matches found

Cvelist
Cvelist
added 2020/01/21 6:30 a.m.32 views

CVE-2019-10558

While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

8.4AI score0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/21 6:30 a.m.98 views

CVE-2019-10558

CVE-2019-10558 describes an out-of-bounds condition in the Qualcomm FastRPC HLOS driver when transferring data from APPS to DSP, where a data buffer controllable by the DSP on a range of Snapdragon platforms (Auto/Compute/CE Connectivity/IoT/Industrial IoT/Mobile/Voice & Music/Wearables) could be...

7.8CVSS8.3AI score0.00202EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/20 12:0 a.m.8 views

The vulnerability of the Intel Easy Streaming Wizard’s data streaming program lies in its insecure handling of privileges, allowing attackers to escalate their privileges.

The vulnerability of the Intel Easy Streaming Wizard data transfer process is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.7CVSS6.6AI score0.00318EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.40 views

Fedora Update for curl FEDORA-2019-6d7f6fa2c8

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.9AI score
SaveExploits0References2
CNVD
CNVD
added 2020/01/07 12:0 a.m.7 views

DTEN D5 and DTEN D7 Information Disclosure Vulnerabilities (CNVD-2020-03013)

The DTEN D5 and DTEN D7 are both stylus pens from DTEN. A security vulnerability exists in the DTEN D5 version prior to 1.3 and the D7 version prior to 1.3, which originates when the program passes user data files over the HTTP protocol. The vulnerability can be exploited by an attacker to access...

7.5CVSS6.8AI score0.00674EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2019/12/02 2:26 p.m.7 views

New Facebook Tool Let Users Transfer Their Photos and Videos to Google

Facebook has finally started implementing the open source data portability framework as the first phase of 'Data Transfer Project,' an initiative the company launched last year in collaboration with Google, Apple, Microsoft, and Twitter. Facebook today announced a new feature that will allow its...

5.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2019/12/02 2:26 p.m.91 views

New Facebook Tool Let Users Transfer Their Photos and Videos to Google

Facebook has finally started implementing the open source data portability framework as the first phase of 'Data Transfer Project,' an initiative the company launched last year in collaboration with Google, Apple, Microsoft, and Twitter. Facebook today announced a new feature that will allow its...

0.5AI score
SaveExploits0
NVD
NVD
added 2019/11/05 11:15 p.m.30 views

CVE-2019-8107

An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request to perform arbitrary file deletion...

6.5CVSS6.4AI score0.00791EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/05 11:15 p.m.13 views

CVE-2019-8107

An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request to perform arbitrary file deletion...

6.5CVSS6.7AI score
SaveExploits0References1
Prion
Prion
added 2019/11/05 11:15 p.m.16 views

Arbitrary file deletion

An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request to perform arbitrary file deletion...

5.5CVSS6.4AI score0.00791EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/05 10:11 p.m.28 views

CVE-2019-8107

An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request to perform arbitrary file deletion...

6.7AI score0.00791EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/10/12 12:0 a.m.5 views

PT-2019-4538 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. This vulnerability was exploited by the APT Antlion group in ...

7.8CVSS8.9AI score0.73856EPSS
SaveExploits11References28
Friends Of PHP
Friends Of PHP
added 2019/10/08 12:0 a.m.37 views

PRODSECBUG-2484: Arbitrary file deletion through export data data transfer

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

6.5CVSS7.2AI score0.00791EPSS
SaveExploits0Affected Software1
Fedora
Fedora
added 2019/09/29 2:22 a.m.50 views

[SECURITY] Fedora 29 Update: curl-7.61.1-12.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

9.8CVSS0.49739EPSS
SaveExploits5
CNVD
CNVD
added 2019/08/28 12:0 a.m.7 views

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability (CNVD-2019-31310)

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

8.8CVSS6.9AI score0.00973EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/28 12:0 a.m.5 views

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability (CNVD-2019-31311)

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

8.8CVSS6.9AI score0.00973EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/08/28 12:0 a.m.15 views

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

8.8CVSS6.9AI score0.00913EPSS
SaveExploits1References1
NVD
NVD
added 2019/08/27 6:15 p.m.16 views

CVE-2019-13264

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

8.8CVSS8.7AI score0.01169EPSS
SaveExploits1References2
Prion
Prion
added 2019/08/27 6:15 p.m.21 views

Design/Logic Flaw

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...

5.8CVSS8.6AI score0.00973EPSS
SaveExploits1References2
Prion
Prion
added 2019/08/27 6:15 p.m.14 views

Design/Logic Flaw

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

5.8CVSS8.6AI score0.00913EPSS
SaveExploits1References2
Rows per page
Query Builder