Google Android Information Disclosure Vulnerability (CNVD-2019-37949)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android Q suffers from an information disclosure vulnerability. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker...

Windows Graphics Disclosure

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Chakra JavaScript Engine Code Execution

The vulnerability of the Chakra JavaScript engine in Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

SymCrypt Disclosure

The vulnerability of the SymCrypt library in the Windows operating system is related to errors in cryptographic transformations. Exploiting this vulnerability can allow an attacker to disclose protected information during the OAEP decryption process...

Pulse Connect Secure Permission Bypass Read Access

The vulnerability of the Pulse Connect Secure VPN server for corporate networks is related to permission processing errors. Exploiting this vulnerability could allow a malicious actor to gain read access to arbitrary files by using specially created URIs...

Azure Active Directory Authentication Access

The vulnerability of Azure Active Directory AAD for managing authentication and access control on Windows operating systems is related to errors in processing MSA Managed Service Accounts cookie files. Exploiting this vulnerability could allow a malicious actor to gain access to a user account...

Google Android Information Disclosure Vulnerability (CNVD-2019-37952)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. An information disclosure vulnerability exists in System in Android Q. The vulnerability is due to the fact that the system is not compatible with Google and the OHA. The vulnerability...

Google Android Information Disclosure Vulnerability (CNVD-2019-38548)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38575)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Information Disclosure Vulnerability (CNVD-2019-38544)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-28864)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android Q suffers from an information disclosure vulnerability. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker...

Windows EnterpriseDB Data Compromise

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL involves errors in code generation. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco ASA Privilege Escalation

The vulnerability of the Cisco Adaptive Security Appliance ASA network interface management web interface is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through specially crafted HTTP requests...

Role-Based Access Control RBAC Unauthorized Access

The vulnerability of the Role-Based Access Control RBAC implementation for the Etcd configuration store is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a request via the...

PT-2019-20320

Уязвимость утилиты printcontrol-web операционной системы Astra Linux связана с ошибками интерпретации данных при заполнении карточки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2019-20313

Уязвимость утилиты kscreen для поддержки работы с несколькими мониторами операционной системы Astra Linux связана с ошибками масштабирования при изменении разрешения экранов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Open-Xchange OX App Information Disclosure Vulnerability (CNVD-2019-40057)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

Open-Xchange OX App Information Disclosure Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

Site Isolation Bypass

The vulnerability of Site Isolation in the Google Chrome web browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using a specially crafted web page...

Windows DHCP Client Code Execution

The vulnerability of the Windows operating system’s DHCP client is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially crafted packets that simulate DHCP server responses...