177 matches found
The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or gain access to protected information.
The vulnerability of the Audio component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to protected information in the kernel memory or cause a service failure reading...
The vulnerability of the Microsoft OneNote note-taking software allows a perpetrator to obtain confidential information.
The vulnerability of the Microsoft OneNote note-taking software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential information through a specially created OneNote file...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the SurfaceFlinger service in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially created application associated with the default...
PT-2016-2425 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 18.0.0.366 Adobe Flash Player versions 19.x through 22.x before 22.0.0.209 Adobe Flash Player version before 11.2.202.632 on Linux Description: The issue is related to the lack of protection for internal...
The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.
The vulnerability of the AMD subsystem of the Mac OS X operating system is related to the lack of protection for system data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory through a specially created...
CVE-2016-0791
Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability of the libstagefright library in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms...
The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, and the Cisco Secure Access Control System, a software solution for access control, allows attackers to obtain confidential information.
The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, and the Cisco Secure Access Control System, a access control software, is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker, operating remotel...
The vulnerability of the Microsoft .NET Framework software platform, which allows a perpetrator to obtain confidential information
The vulnerability of the WinForms component of the Microsoft .NET Framework is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain confidential information using specially crafted data...
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection mechanism allows attackers to enhance their privileges.
The vulnerability of the Posture module, which is part of the Cisco Identity Services Engine ISE of the Cisco AnyConnect Secure Mobility Client encryption protection tool, is related to access control deficiencies. Exploiting this vulnerability can allow an intruder, operating locally, to increas...
Siemens SIMATIC Communicator Module Information Disclosure Vulnerability
Siemens SIMATIC CP 343-1/TIM 3V-IE/TIM 4R-IE/CP 443-1 are communicator modules. Siemens SIMATIC CP 343-1 Advanced devices prior to version 3.0.44, CP 343-1 Lean, CP 343-1, TIM 3V-IE, TIM 3V-IE Advanced, TIM 3V-IE DNP3, TIM 4R-IE, TIM 4R-IE DNP3, CP 443-1 , CP 443-1 Advanced A security vulnerabili...
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection allows a perpetrator to move arbitrary files.
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s IPC channel implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to move arbitrary files around...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information
The vulnerability of the Mail component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information at the moment when email messages are printed out...
The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information stored in memory
The vulnerability of the IOAcceleratorFamily component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information stored in memory through a specially...
Apple OS X Firmware Write-Protect Local Elevation of Privilege Vulnerability
Apple OS X is an Apple operating system. The Apple OS X firmware fails to properly write-protect the BIOS by entering and exiting sleep mode during the current session, and suffers from a local elevation of privilege vulnerability, which allows a local root user to write to the contents of the...
CVE-2013-4135
The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...
