8251 matches found
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists as potential information leaks were found in various mutable static variables. These could be exploited in application scenarios that execute untrusted scripting code...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists as potential information leaks were found in various mutable static variables. These could be exploited in application scenarios that execute untrusted scripting code...
Information Disclosure
kernel is vulnerable to information disclosure. The padding data in several core network structures was not initialized properly before being sent to user-space, possibly leading to information leaks...
Information Disclosure
The kernel is vulnerable to Information Disclosure. Due to missing initialization flaws found in the Linux kernel, padding data in several core network structures was not initialized properly before being sent to user-space. These flaws could lead to information leaks...
Denial Of Service (DoS)
The kernel is vulnerable to Denial Of Service DoS. Memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease...
CentOS 7 : ImageMagick (RHSA-2020:1180)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1180 advisory. - ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a...
CVE-2019-19073
Memory leaks in drivers/net/wireless/ath/ath9k/htchst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption by triggering waitforcompletiontimeout failures. This affects the htcconfigpipecredits function, the htcsetupcomplete function, and the...
CVE-2019-17053
A vulnerability was discovered in the Linux kernel's AFIEEE802154 networking module where permissions checks are not enforced. This can allow an unprivileged user to create raw sockets for this protocol leading to the potential for data leaks or system unavailability...
About the security content of iOS 13.2 and iPadOS 13.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Cloud Providers, CDNs Team Up to Battle Internet Routing Attacks
A group of tech giants – including Akamai, Amazon Web Services, Cloudflare, Facebook, Google, Microsoft and Netflix – are banding together to battle route hijacking, route leaks and IP address-spoofing attacks targeting internet users. They’re coming together under a program was introduced this...
CVE-2020-11458
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...
Code injection
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...
CVE-2020-11458
CVE-2020-11458 affects MISP versions prior to 2.4.124, where app/Model/feed.php allows administrators to select arbitrary files to ingest. This does not expose full file contents but can leak strings matching patterns, including passwords from database.php or GPG passphrases from config.php. Rele...
Fedora 30 : coturn (2020-f3fcb1608a)
An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. - An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server...
Mail.ru: mailer.i.bizml.ru viber service preprod information disclosure
DEBUG mode enabled on http://52.29.101.127:1060/ leading to DB login and passwd leaks...
Memory Leaks
ImageMagick is vulnerable to memory leaks. It is possible because an image display and manipulation tool for the X Window System can read and write multiple image formats...
Denial Of Service (DoS)
ImageMagick is vulnerable to memory leaks. The attacker can send a malicious image to the function WritePNMImage of coders/pnm, causing a heap-based buffer over-read...
Memory Leaks
ImageMagick is vulnerable to memory leaks. The attack is possible due to a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c...
Memory Leaks
The polkit is vulnerable memory leaks. The attack is possible because it performs an improper authorization in the polkitbackendinteractiveauthoritycheckauthorization function in polkitd...
kernel: ASLR bypass for setuid binaries due to late install_exec_creds()
A flaw in the loadelfbinary function in the Linux kernel allows a local attacker to leak the base address of .text and stack sections for setuid binaries and bypass ASLR because installexeccreds is called too late in this function...