13329 matches found
Kakadu Software SDK Numeric Error Vulnerability
Kakadu Software SDK is a set of JPEG2000 software development kits SDK from Kakadu Software, Australia. A numeric error vulnerability exists in the 'derivetapsandgains' function of the kduv7ar.dll file in version 7.10.2 of the Kakadu Software SDK, which arises from a networked system or product...
CVE-2019-0404
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage
A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that encrypts extremely sensitive data to shield it from attackers even when a system gets compromised. Dubbed Plundervolt and tracked as...
PT-2019-5990
Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2019.021.20056 and earlier Adobe Acrobat and Reader versions 2017.011.30155 and earlier Adobe Acrobat and Reader versions 2015.006.30505 and earlier Description The issue is related to a security bypass...
Windows iphlpsvc DLL Privilege Escalation File Modification
The vulnerability of the iphlpsvc.dll library in the Windows operating system is related to errors during file creation. Exploiting this vulnerability can allow attackers to enhance their privileges and modify arbitrary files using a specially created application...
Siemens RUGGEDCOM ROS (Update A)
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
Google Chrome DevTools UI Replacement
The vulnerability of Google Chrome’s DevTools component is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created Chrome extension...
Oilpan Component Google Chrome Data Compromise
The vulnerability of the Oilpan component in the Google Chrome browser is caused by synchronization errors when using a common resource. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a...
Privilege Escalation
The vulnerability of the compatibility subsystem for running Linux applications stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...
Blink Display Module Manipulation
The vulnerability of the Blink display module in Google Chrome browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to perform domain spoofing using a specially created HTML page...
Docker Harbor Registry Privilege Escalation
The vulnerability of the Docker container Harbor registry is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges and gain unauthorized access to adjacent projects...
Windows Data Sharing Service Privilege Escalation
The vulnerability of the Windows Data Sharing Service, a component of the Windows operating system, is related to errors in file handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
SAP Diagnostics Agent Information Disclosure Vulnerability
SAP Diagnostics Agent is a system diagnostic agent program from SAP. An information disclosure vulnerability exists in SAP Diagnostics Agent. The vulnerability arises from a configuration or other error in the operation of a networked system or product. An attacker could exploit this vulnerabilit...
SUSE-SU-2019:3180-1 Security update for permissions
This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary bsc1093414. - CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic...
EulerOS 2.0 SP2 : zziplib (EulerOS-SA-2019-2478)
According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The zziplib is a lightweight library to easily extract data from zip files.Security Fixes:An issue was discovered in ZZIPlib through 0.13.69...
Firefox Reader View Code Execution
The vulnerability of the Firefox Browser’s Reader View function is related to errors in processing cookie files with the SameSite attribute. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Google Chrome Omnibox Component Replacement
The vulnerability of Google Chrome arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to replace the content of the Omnibox component URL by using a specially created HTML page...
ReadableStreams Component Code Execution
The vulnerability of the ReadableStreams component in Google Chrome’s Blink web rendering engine is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...
Windows Data Sharing Service Privilege Escalation
The vulnerability of the Windows Data Sharing Service, a component of the Windows operating system, is related to errors in file handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Win32k Unauthorized Access
The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...