1488 matches found
GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14339)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE is a GitLab Enterprise Edition GitLab EE...
GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14343)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.0 - 12.7.2 suffers from an insecure privilege...
Microsoft Win32k Elevation of Privilege (CVE-2020-0731)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14341)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.8 - 12.7.2 suffers from an insecure privilege...
Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Intel escalation of privilege vulnerability.
Summary IBM has released the Unified Extensible Firmware Interface UEFI fixes for System x, Flex and BladeCenter systems in response to the following Intel escalation of privilege vulnerability. Vulnerability Details CVEID: CVE-2019-0151 DESCRIPTION: Insufficient memory protection in IntelR TXT f...
CVE-2018-16270
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...
Microsoft Windows Search Indexer Privilege Vulnerability (CNVD-2020-07944)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Search Indexer is a search index for the Windows Microsoft Windows is a set of operating systems for personal...
Microsoft Windows Search Indexer Privilege Vulnerability (CNVD-2020-07945)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Search Indexer is a search index for the Windows Microsoft Windows is a set of operating systems for personal...
Microsoft Windows Search Indexer Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Search Indexer is a search index for the Windows Microsoft Windows is a set of operating systems for personal...
Microsoft Windows Media Service Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege exploit exists in Microsoft Windows Media Service. An attacker can exploit thi...
Arista Networks CloudVision Portal Privilege Vulnerability
Arista Networks CloudVision Portal is a suite of web-based user management portals for the CloudVision platform from Arista Networks, USA. The product includes features such as network device configuration, compliance management, change management, and network monitoring and management. A...
CVE-2020-0632
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
CVE-2020-0644
An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0635...
CVE-2020-0641
An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...
CVE-2020-0630
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
CVE-2020-0631
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
CVE-2020-0629
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
Microsoft Windows Windows Printer Service Privilege Vulnerability
Microsoft Windows is a family of operating systems from Microsoft.Microsoft Windows Windows Printer Service is a printing service in Microsoft Windows. A privilege vulnerability exists in Microsoft Windows Windows Printer Service, which originates when the program does not properly validate the...
OPENSUSE-SU-2019:2535-1 Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. This update was imported from the SUSE:SLE-15:Update update project...