589 matches found
CVE-2020-24489
Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-24489: Incomplete Cleanup
Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-24489
Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...
Thales Sentinel LDK Run-Time Environment
1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Thales Equipment: Thales Sentinel LDK Run-Time Environment RTE Vulnerability: Incomplete Cleanup 2. RISK EVALUATION Products that have uninstalled software using the Sentinel LDK Run-Time Environment,...
The vulnerability of the Intel PROSet/Wireless WiFi connection utility arises from incomplete cleaning of temporary or auxiliary resources. This allows a malicious actor to disclose protected information or cause service failures.
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
Input validation
Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...
Intel PROSet Wireless Information Disclosure Vulnerability
Intel PROSet Wireless is a driver for the Intel PROSet wireless network card from Intel Corporation USA. An information disclosure vulnerability exists in Intel PROSet Wireless, which stems from an incomplete cleanup that could allow a privileged user to enable information disclosure and denial o...
CVE-2019-25016: Incomplete Cleanup
In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to authenticated user to execute specific commands were not affected by this issue...
CVE-2020-13451
An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros...
CVE-2020-13451
CVE-2020-13451 affects Gotenberg up to version 6.2.1. The issue is described as an incomplete-cleanup vulnerability in the Office rendering engine, enabling an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros. Connected documents corroborate the vulnerab...
CVE-2020-13451
An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros...
CVE-2020-13451: Incomplete Cleanup
An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros...
PT-2021-9613
Name of the Vulnerable Software and Affected Versions Gotenberg versions through 6.2.1 Description An incomplete-cleanup vulnerability in the Office rendering engine allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros. Recommendations For Gotenber...
CVE-2019-8732: Incomplete Cleanup
The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...
CVE-2020-0257
In SpecializeCommon of comandroidinternalosZygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
Input validation
In SpecializeCommon of comandroidinternalosZygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
ASB-A-156741968
In SpecializeCommon of comandroidinternalosZygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2020-12414: Incomplete Cleanup
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS 27...