CVE-2023-20972

In btmvendorspecificevt of btmdevctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-20974

In btmbleaddresolvinglistentrycomplete of btmbleprivacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

AZL-26758 CVE-2023-20958 affecting package qt5-qtbase for versions less than 5.12.11-5

In readpaint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2548031...

CVE-2022-20467

The CVE-2022-20467 issue affects Android 11–13 where the function isBluetoothShareUri in BluetoothOppUtility.java can read files incorrectly due to a confused deputy, causing local information disclosure with no extra execution privileges. Exploitation requires user interaction, with local attack...

PT-2023-17828 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an incorrect bounds check in the dumpstateBoard of Dumpstate.cpp, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System executi...

PT-2023-17796 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a missing bounds check in p2p iface.cpp, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring System executio...

PT-2023-17777 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm ble write adv enable complete function of btm ble gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

PT-2023-5290 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: Intel Quartus Prime Pro Edition for linux versions prior to 22.4 Description: The issue is related to the use of insufficiently random values in some Intel Agilex software, which is part of Intel Quartus Prime Pro Edition for linux. This may...

SUSE CVE-2022-33972

Incorrect calculation in microcode keying mechanism for some 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable information disclosure via local access...

HPESBGN04449 rev 2- HPE OneView for VMware vCenter, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter/Operations Manager/Log Insight 9.6, 10.0, 10.1, 10.2, 10.3, 10.4, 11.0, 11.1,11.2 CVSS Scores: | CVE | CVSS Vector | Base Score | |...

UBUNTU-CVE-2022-38090

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-12889 · Intel · Intel Sgx Sdk

Name of the Vulnerable Software and Affected Versions: IntelR SGX SDK software for Linux versions prior to 2.16.100.1 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable information disclosure via local access...

Intel SGX SDK 安全漏洞

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation USA. A security vulnerability exists in the IntelR SGX SDK software for Linux prior to version 2.16.100.1, which stems from inadequate software control flow...

SUSE CVE-2003-0461

/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords...

SUSE CVE-2011-1020

The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lsee...

SUSE CVE-2012-6549

The isofsexportencodefh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application...

SUSE CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

SUSE CVE-2016-9756

arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment CS in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

SUSE CVE-2018-9056

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table PHT, aka BranchScope...