438 matches found
systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump
A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the origina...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, relates to the recovery of unreliable data in memory. This allows a perpetrator to execute arbitrary code.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2025-60990
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability...
Adobe Format Plugins 缓冲区错误漏洞
Adobe Format Plugins is a format plug-in from the American company Audobee Adobe. Adobe Format Plugins suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause the disclosure of sensitive information in memory...
EUVD-2025-50795
Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2025-12436
Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-12436
Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-12436
A policy bypass in the Extensions component of Google Chrome , Microsoft Edge , and other Chromium-based browsers (such as Opera and Vivaldi ) allows an attacker to obtain potentially sensitive information from process memory. This vulnerability occurs when a user is convinced to install a malici...
CVE-2025-12436
Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...
SUSE CVE-2025-12436
Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...
ROS-20251031-03
A vulnerability in the Apache ActiveMQ software platform is related to the recovery of invalid data in memory data. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by creating an OpenWire class. arbitrary code by creating a class over the OpenWire protoco...
The vulnerability of the Apache ActiveMQ NMS AMQP software platform allows a attacker to execute arbitrary code on the client side.
The vulnerability of the Apache ActiveMQ NMS AMQP software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the client side...
PT-2025-42331
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM OAuth affected versions not specified Description An out-of-bounds read issue exists in F5 BIG-IP APM OAuth, potentially leading to the leakage of sensitive memory data. When an OAuth access profile Resource Server or Resource...
ABB LVS MConfig
SUMMARY ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory. An attacker with access to local networks who successfully exploits vulnerability could have access to application’s sensitive information. ABB strongly advises...
EUVD-2020-27940
Malware in sbrugna...
EUVD-2018-8657
Malware in sbrugna...
EUVD-2018-0047
Malware in sbrugna...
EUVD-2014-3886
Malware in sbrugna...