153 matches found
Code injection
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access...
CVE-2018-3627
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access...
Intel® Converged Security Management Engine (Intel® CSME) 11.x issue
Summary: In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine Intel® CSME, Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience. Description: In an effort to continuously improve...
Design/Logic Flaw
A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 138117...
AIX 7.2 TL 0 : aixbase (IJ02827)
https://vulners.com/cve/CVE-2018-1383 https://vulners.com/cve/CVE-2018-1383 A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. C Tenable Network Security, Inc. The...
Vulnerability impacts AIX and VIOS (CVE-2018-1383),Vulnerability impacts VIOS and VIOS (CVE-2018-1383)
IBM SECURITY ADVISORY First Issued: Thu Feb 8 13:49:23 CST 2018 |Updated: Tue Feb 13 11:05:56 CST 2018 |Update: CVE description was updated to provide additional detail. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/aixbaseadvisory.asc...
CVE-2017-16633
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
CVE-2017-16633
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
Information disclosure
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
CVE-2017-16633
Technical details about CVE-2017-16633 are not publicly available in the provided connected documents; no specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2017-16633
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
Joomla! < 3.8.0 Information Disclosure Vulnerability
Joomla is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
CVE-2017-14595
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
Information disclosure
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
CVE-2017-14595
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
[20170901] - Core - Information Disclosure
A logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
[20171103] - Core - Information Disclosure
A logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
FireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability. This vulnerability allows a malicious actor to download and execute a Visual Basic script containing PowerShell commands when a user opens a document containing ...
nspr: arbitrary code execution
A logic bug in the handling of large allocations would allow exceptionally large allocations to be reported as successful, without actually allocating the requested memory. This may allow attackers to bypass security checks and obtain control of arbitrary memory...
FreeBSD Kernel SCTP Remote NULL Ptr Dereference DoS
No description provided by source. / FreeBSD kernel SCTP latest release remote NULL ptr dereference DoS by Shaun Colley [email protected], 2 Aug 2012 The SCTP implementation used by FreeBSD reference implementation is vulnerable to a remote NULL pointer dereference in kernel due to a logic bug...