11260 matches found
Apple Xcode ld64 Component Buffer Overflow Vulnerability
Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. A buffer overflow vulnerability exists in the ld64 component of Apple Xcode...
CVE-2019-7004
A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...
OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
YARA has unspecified vulnerabilities
YARA is a set of tools used to help software researchers identify and categorize malware samples. A security vulnerability exists in the machoparsefile function of the macho/macho.c file in YARA version 3.11.0. The vulnerability can be exploited by an attacker to cause out-of-bounds memory access...
CVE-2019-2219
In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User...
Linux kernel information leakage vulnerability (CNVD-2019-46991)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An information leakage vulnerability exists in Linux kernel versions prior to 5.3.11. The vulnerability can be...
DEBIAN-CVE-2019-19534
In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c driver, aka CID-f7a1337f0d29...
Bash Elevation of Privilege Vulnerability
Bash is a shell command language interpreter written for the GNU Project and running on Unix-like operating systems by American software developer Brian J. Fox. It can read and execute commands from standard input devices or files. A security vulnerability exists in the disableprivmode of the...
wildfly-security-manager: security manager authorization bypass
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...
wildfly-security-manager: security manager authorization bypass
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...
wildfly-security-manager: security manager authorization bypass
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...
wildfly-security-manager: security manager authorization bypass
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...
wildfly-security-manager: security manager authorization bypass
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...
wildfly-security-manager: security manager authorization bypass
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...
VMware Workstation and VMware Fusion Denial of Service Vulnerability (CNVD-2020-41588)
VMware Workstation is a desktop virtual computing software from VMware with Windows and Linux versions. VMware Fusion is a virtual machine hypervisor developed by VMware for Macintosh computers. A denial of service vulnerability exists in the RPC handler in VMware Workstation version 15.x prior t...
Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2019-42752)
Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...
Linux kernel memory leak vulnerability (CNVD-2019-41712)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'allocsgtable' function in the drivers/net/wireless/intel/iwlwifi/fw/dbg.c file in Linux kernel 5.3.11 and earlier...
Linux kernel memory leak vulnerability (CNVD-2019-41709)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'i2400moprfkillswtoggle' function in the drivers/net/wimax/i2400m/op-rfkill.c file in versions of Linux kernel prior to...
CVE-2019-19047
A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5crdumpcollect failures, aka CID-c7ed6d0183d5...
UBUNTU-CVE-2019-19063
Two memory leaks in the rtlusbprobe function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption, aka CID-3f9361695113...