10561 matches found
Vulnerability of Windows operating systems, related to errors in processing .LNK file extensions, allowing a hacker to execute arbitrary code
The vulnerability of the Windows operating system is related to errors in processing files with the extension .LNK link files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .LNK file...
Chaturbate: Web cache deception attack - expose token information
Hello, I have found new Vulnerability in your website which called Web cache deception attack. It's found first time in Paypal. Web Cache Deception Attack Websites often tend to use web cache functionality to store files that are often retrieved, to reduce latency from the web server. Let's see a...
shop24-7.info Open Redirect vulnerability
Open Bug Bounty ID: OBB-665934 Description| Value ---|--- Affected Website:| shop24-7.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
CVE-2018-8396
CVE-2018-8396 describes an information-disclosure vulnerability in the Windows GDI component. The vulnerability allows an attacker to trigger memory disclosure in Windows Server 2008, Windows 7, and Windows Server 2008 R2. The root cause is the improper handling/decoding of content in memory, lea...
spring-framework: Improper URL path validation allows for bypassing of security checks on static resources
Spring Security Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3 does not consider URL path parameters when processing security constraints. By adding a URL path parameter with special encodings, an...
kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation
Use-after-free vulnerability in the sndpcminfo function in the ALSA subsystem in the Linux kernel allows attackers to induce a kernel memory corruption and possibly crash or lock up a system. Due to the nature of the flaw, a privilege escalation cannot be fully ruled out, although we believe it i...
CVE-2018-2446
Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information server name, hence leading to an information disclosure...
Microsoft Windows Kernel CVE-2018-8341 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
FreeBSD -- L1 Terminal Fault (L1TF) Kernel Information Disclosure
Problem Description: On certain Intel 64-bit x86 systems there is a period of time during terminal fault handling where the CPU may use speculative execution to try to load data. The CPU may speculatively access the level 1 data cache L1D. Data which would otherwise be protected may then be...
info-teulada-moraira.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-663664 Description| Value ---|--- Affected Website:| info-teulada-moraira.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
info-innovation.jp XSS vulnerability
Open Bug Bounty ID: OBB-662558 Description| Value ---|--- Affected Website:| info-innovation.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Design/Logic Flaw
The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call...
UBUNTU-CVE-2018-5953
The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...
MantisBT Cross-Site Scripting Vulnerability (CNVD-2018-14791)
MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in the View Filters page viewfilterspage.php in MantisBT versions 2.1.0...
CVE-2018-7071
HPE NFVD (Network Function Virtualization Director) 4.2.1 prior to GUI patch 3 has a remote information-disclosure vulnerability. The CVE-2018-7071 entry notes exposure of sensitive information via remote access, with the affected component being NFVD 4.2.1 before patch 3. The CNVD entry corrobor...
CVE-2018-14473
CVE-2018-14473 affects OCS Inventory NG 2.4.1. The issue is an XXE (XML External Entity) due to improper XML parsing configuration, enabling an attacker to exfiltrate data or cause a Denial of Service via a crafted HTTP request. All connected documents corroborate the description; no specific pat...
CVE-2018-14680
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames...
CVE-2018-1999028
An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins...
CVE-2016-8637
The vulnerability CVE-2016-8637 affects dracut when generating initramfs images with world-readable permissions using the early cpio path, allowing local attackers to read sensitive data from initramfs files. The root cause is information disclosure via world-readable initramfs contents generated...
