Lucene search
+L

7322 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:00 a.m.33 views

Oracle VirtualBox crServerDispatchGetVertexAttribivARB Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS2.6AI score0.00533EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:00 a.m.21 views

Oracle VirtualBox crServerDispatchGetCombinerOutputParameterfvNV Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS1.7AI score0.00533EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:00 a.m.28 views

Oracle VirtualBox crServerDispatchGetVertexAttribfvARB Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS2.5AI score0.00533EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:00 a.m.28 views

Oracle VirtualBox crServerDispatchGetProgramParameterfvNV Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS1.6AI score0.00533EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:00 a.m.22 views

Oracle VirtualBox crServerDispatchGetVertexAttribdvNV Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS1.9AI score0.00533EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/15 12:00 a.m.40 views

Microsoft Windows AppX Deployment Service Hard Link Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX...

7.3CVSS4.1AI score0.414EPSS
SaveExploits20References1
Palo Alto Networks
Palo Alto Networks
added 2019/04/09 5:45 p.m.76 views

Information Disclosure in GlobalProtect App

An information disclosure vulnerability exists in the GlobalProtect App for Windows and macOS VU192371. Successful exploitation of this issue would allow a local authenticated attacker to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the...

3.2AI score0.00272EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
added 2019/04/09 12:00 a.m.31 views

Microsoft Windows CVE-2019-0840 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10...

1.7AI score0.02127EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/04/09 12:00 a.m.42 views

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1197)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A security flaw was found in the Linux kernel in drivers/tty/ntty.c which allows local attackers ones who are able to access pseu...

7.8CVSS6.5AI score0.00531EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2019/04/09 12:00 a.m.42 views

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1204)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A security flaw was found in the Linux kernel in drivers/tty/ntty.c which allows local attackers ones who are able to access pseu...

7.8CVSS6.5AI score0.00531EPSS
SaveExploits0References7
CNVD
CNVD
added 2019/04/08 12:00 a.m.2 views

Linux kernel vfio-type1-DMA-Mappings Denial of Service Vulnerability

Linux kernel is an open source operating system. A security vulnerability in Linux kernel vfio-type1-DMA-Mappings allows local attackers to exploit the vulnerability to submit special requests that can crash the system...

5.5CVSS7.5AI score0.00538EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/28 8:29 p.m.8 views

CVE-2019-9166

Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...

7.8CVSS7.2AI score0.01237EPSS
SaveExploits2References3
NVD
NVD
added 2019/03/28 8:29 p.m.25 views

CVE-2019-9166

Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...

7.8CVSS7.8AI score0.01237EPSS
SaveExploits2References3
Prion
Prion
added 2019/03/28 8:29 p.m.24 views

Privilege escalation

Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...

7.2CVSS7.7AI score0.01237EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2019/03/28 6:29 p.m.16 views

CVE-2019-1003048

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration...

7.8CVSS6.6AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2019/03/28 5:59 p.m.47 views

CVE-2019-1003048

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration...

7.8CVSS4.6AI score0.00298EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/03/28 12:00 a.m.10 views

Apple macOS Mojave Notes Information Disclosure Vulnerability

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.Notes is one of the memo components. A security vulnerability exists in the Notes component in Apple macOS Mojave versions prior to 10.14.4. A local attacker could exploit the vulnerability to view memos that...

5.5CVSS6.2AI score0.00325EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:00 a.m.42 views

openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-18710: An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned...

7.8CVSS7.4AI score0.00552EPSS
SaveExploits0References98
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:00 a.m.57 views

openSUSE Security Update : the Linux Kernel (openSUSE-2019-536) (Spectre)

The openSUSE Leap 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges...

7.8CVSS8.4AI score0.92621EPSS
SaveExploits28References329
Zero Day Initiative
Zero Day Initiative
added 2019/03/26 12:00 a.m.33 views

Apple macOS SCSITaskUserClient Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SCSITaskUserClient...

7.8CVSS4AI score0.00395EPSS
SaveExploits0References1
Rows per page
Query Builder