Google Chrome File System API Policy Enforcement Deficiency Vulnerability (CNVD-2021-28289)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A file system API policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass file system...

The vulnerability of the QES operating system, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the QES operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Cisco Jabber software platform for Windows, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Jabber software for Windows relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2020-15292

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor IntPeGetDirectory, TOCTOU IntPeParseUnwindData or insufficie...

The vulnerability of the DirectX component of the Windows operating system, which allows attackers to exploit their privileges

The vulnerability of the DirectX component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Kernel component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Kernel component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

The vulnerability of the Kerberos KDC component in Windows operating systems allows a perpetrator to circumvent existing security restrictions and gain unauthorized access to the application.

The vulnerability of the Kerberos KDC component in Windows operating systems is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions and gain unauthorized access to applications...

The vulnerability of the Windows operating system, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms. This allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

The vulnerability of the implementation of the FTP verification mechanism for microprogramming-based network interface controllers in Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances allows attackers to gain unauthorized access to protected information.

The vulnerability of the FTP verification mechanism implemented by Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

The vulnerability of the OpenStack Octavia load balancer, related to lack of access control, allows attackers to partially compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the OpenStack Octavia load balancer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to partially compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the JunOS operating system, related to authentication deficiencies, allows attackers to gain access to the network.

The vulnerability of the JunOS operating system is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the network...

UBUNTU-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the NPort IAW5000A-I/O Series web server software lies in its lack of access control mechanisms, allowing attackers to send arbitrary requests to the vulnerable system.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the vulnerable system remotely...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the pvrdma_realize function in the PVRDMA virtual network adapter allows a hacker to induce a service failure.

The vulnerability of the pvrdmarealize function in the PVRDMA virtual network adapter emulator for hardware emulation software QEMU is related to deficiencies in resource release after the expiration of its useful lifespan. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the TCL-script interpreter used by Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the TCL-script interpreter for Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Security component of the Oracle Transportation Management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Transportation Management system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...