Lucene search
K

502 matches found

RedHat Linux
RedHat Linux
added 2019/05/27 4:1 p.m.3 views

pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc

A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation...

8.8CVSS5.7AI score0.00403EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/05/27 4:0 p.m.3 views

pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc

A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation...

8.8CVSS5.7AI score0.00403EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2019/05/14 12:0 a.m.19 views

Fedora Update for libqb FEDORA-2019-e2d5de3342

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2019/05/04 2:26 a.m.15 views

[SECURITY] Fedora 29 Update: libqb-1.0.5-1.fc29

libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...

2AI score
Exploits0
Fedora
Fedora
added 2019/04/30 1:30 a.m.14 views

[SECURITY] Fedora 30 Update: libqb-1.0.5-1.fc30

libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...

2AI score
Exploits0
OSV
OSV
added 2019/04/26 5:29 p.m.4 views

CVE-2019-9799

Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox 66...

7.5CVSS7.3AI score0.0115EPSS
Exploits0References2
NVD
NVD
added 2019/04/26 5:29 p.m.12 views

CVE-2019-9799

Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox 66...

7.5CVSS6.8AI score0.0115EPSS
Exploits0References2
CVE
CVE
added 2019/04/26 4:13 p.m.139 views

CVE-2019-9799

CVE-2019-9799 affects Mozilla Firefox before 66.0. The issue is caused by insufficient bounds checking of data during inter-process communication, which can allow a compromised content process to read memory from the parent process under certain conditions. Connected advisories/plugins corroborat...

7.5CVSS7.5AI score0.0115EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/04/26 4:13 p.m.25 views

CVE-2019-9799

Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox 66...

7.5CVSS8.7AI score0.0115EPSS
Exploits0
Cvelist
Cvelist
added 2019/04/26 4:13 p.m.16 views

CVE-2019-9799

Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox 66...

7.7AI score0.0115EPSS
Exploits0References2
OSV
OSV
added 2019/04/17 12:0 a.m.1 views

UBUNTU-CVE-2018-16877

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation...

8.8CVSS7AI score0.00403EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2019/03/29 12:0 a.m.64 views

Mozilla Firefox < 66.0 Multiple Vulnerabilities

Binary data 700487.prm...

9.8CVSS7.8AI score0.19762EPSS
Exploits13References22
OSV
OSV
added 2019/03/20 12:0 a.m.3 views

UBUNTU-CVE-2019-9799

Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox 66...

7.5CVSS7.1AI score0.0115EPSS
Exploits0References5
Mozilla
Mozilla
added 2019/03/19 12:0 a.m.169 views

Security vulnerabilities fixed in Firefox 66 — Mozilla

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. The type inference system allows the compilation of functions that can cause typ...

9.8CVSS0.19762EPSS
Exploits11References24Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/03/19 12:0 a.m.257 views

Mozilla Firefox < 66.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 66.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-07 advisory. - A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some...

9.8CVSS7.5AI score0.19762EPSS
Exploits13References22
Tenable Nessus
Tenable Nessus
added 2019/03/19 12:0 a.m.51 views

Mozilla Firefox < 66.0

The version of Firefox installed on the remote Windows host is prior to 66.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-07 advisory. - A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions,...

9.8CVSS7.5AI score0.19762EPSS
Exploits13References22
NVD
NVD
added 2019/02/05 9:29 p.m.16 views

CVE-2018-18505

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

10CVSS9.2AI score0.04538EPSS
Exploits0References18
Debian CVE
Debian CVE
added 2019/02/05 9:0 p.m.224 views

CVE-2018-18505

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

10CVSS9.9AI score0.04538EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2019/02/04 8:45 p.m.2 views

Mozilla: Privilege escalation through IPC channel messages

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

10CVSS7.3AI score0.04538EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/02/04 8:45 p.m.3 views

Mozilla: Privilege escalation through IPC channel messages

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

10CVSS7.3AI score0.04538EPSS
Exploits0References5
Rows per page
Query Builder