Lucene search
+L

7097 matches found

CVE
CVE
added 2020/11/18 7:59 a.m.284 views

CVE-2020-28915

CVE-2020-28915 is a Linux kernel vulnerability in the fbcon framebuffer code, where a buffer over-read before 5.8.15 could allow a local attacker to read kernel memory. The issue is caused by improper bounds handling in the framebuffer font-related path used by fbcon. Affected fix: upstream patch...

6.1CVSS6.3AI score0.00379EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2020/11/18 7:59 a.m.26 views

CVE-2020-28915

A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def...

6.5AI score0.00379EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2020/11/18 7:59 a.m.45 views

CVE-2020-28915

A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def...

6.1CVSS6.2AI score0.00379EPSS
SaveExploits0
CNNVD
CNNVD
added 2020/11/18 12:0 a.m.13 views

Linux kernel 缓冲区错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A buffer over-read vulnerability exists in the fbcon code in Linux kernel versions prior to 5.8.15. A local attacker...

6.1CVSS6.9AI score0.00379EPSS
SaveExploits0References31
CNVD
CNVD
added 2020/11/13 12:0 a.m.43 views

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63302)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Microsoft Windows/Windows Server Win32k has an information disclosure...

5.5CVSS2.9AI score0.01308EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/13 12:0 a.m.51 views

Microsoft Windows/Windows Server Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. An information disclosure vulnerability exists in the Microsoft...

5.5CVSS1.6AI score0.01308EPSS
SaveExploits0References1
Apple
Apple
added 2020/11/12 7:45 a.m.40 views

About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS1AI score0.22178EPSS
SaveExploits2Affected Software3
Positive Technologies
Positive Technologies
added 2020/11/12 12:0 a.m.3 views

PT-2020-11851 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 Description: A logic issue was addressed with improved state management, allowing a malicious application to potentially determine kernel memory layout. Recommendations: For versions prior to 11.0.1, update to...

5.5CVSS5.5AI score0.00387EPSS
SaveExploits0References13
Apple
Apple
added 2020/11/12 12:0 a.m.148 views

About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave

About the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave This document describes the security content of Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave. About Apple security updates For our customers' protection, Apple doesn't...

9.3CVSS7.8AI score0.22178EPSS
SaveExploits2References1Affected Software2
Positive Technologies
Positive Technologies
added 2020/11/12 12:0 a.m.5 views

PT-2020-20910 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: A logic issue was addressed with improved state management. A malicious application...

5.5CVSS5.4AI score0.01198EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2020/11/12 12:0 a.m.3 views

PT-2020-20904 · Apple · Macos Catalina +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 tvOS versions prior to 14.0 macOS Big Sur versions prior to 11.1 macOS Catalina versions prior to Security Update 2020-001 macOS Mojave versions prior to Security Update 2020-007 watchOS versions prior to 7.0 iO...

9.3CVSS6.9AI score0.02323EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2020/11/04 1:14 a.m.14 views

kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c

An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability...

6CVSS6.9AI score0.00517EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/11/04 1:14 a.m.7 views

kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c

An information leak flaw was found in the Linux kernel's USB digital video device driver. An attacker with a malicious USB device presenting itself as a 'Technotrend/Hauppauge USB DEC' device is able to issue commands to this specific device and leak kernel internal memory information. The highes...

2.4CVSS6.8AI score0.0046EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/11/04 12:53 a.m.9 views

kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c

An information leak flaw was found in the Linux kernel's USB digital video device driver. An attacker with a malicious USB device presenting itself as a 'Technotrend/Hauppauge USB DEC' device is able to issue commands to this specific device and leak kernel internal memory information. The highes...

2.4CVSS6.8AI score0.0046EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/11/04 12:0 a.m.5 views

Buffer Overflow Vulnerability in Multiple Apple Products (CNVD-2020-61634)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.Apple iOS is an operating system for mobile devices.Apple tvOS is an operating system for smart TVs.Apple tvOS is an operating system...

7.1CVSS6.3AI score0.00315EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/04 12:0 a.m.5 views

Apple macOS Catalina buffer overflow vulnerability (CNVD-2020-60822)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.4, which stems from the possibility that a malicious application may be able to determine the kernel memory layout,...

7.8CVSS6.4AI score0.00791EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2020/10/29 12:0 a.m.5 views

VulnCheck KEV: CVE-2020-27950

Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory...

7.1CVSS6.8AI score0.1652EPSS
SaveExploits2References1
CNVD
CNVD
added 2020/10/28 12:0 a.m.4 views

Apple macOS Catalina Bluetooth Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in OS X Bluetooth, which can be exploited by a local user to cause the system to unexpectedly terminate or read kernel memory. An attacker could exploit this vulnerability to cause t...

7.1CVSS6.2AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/27 8:15 p.m.33 views

CVE-2019-8780

The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13. A malicious application may be able to determine kernel memory layout...

7.1CVSS4.4AI score0.00895EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/27 8:15 p.m.9 views

CVE-2019-8780

The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13. A malicious application may be able to determine kernel memory layout...

5.5CVSS6.1AI score0.00895EPSS
SaveExploits0References2
Rows per page
Query Builder