Lucene search
K

7515 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.1 views

The vulnerability of the Windows operating system’s print queue dispatcher service allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system’s print queue dispatcher is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00981EPSS
Exploits2References2
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.1 views

The vulnerability of the print queue dispatcher in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the print driver in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.1CVSS6.8AI score0.00932EPSS
Exploits0References3
CNVD
CNVD
added 2020/11/18 12:0 a.m.2 views

IBM MQ Denial of Service Vulnerability (CNVD-2020-65161)

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A denial of service vulnerability exists in IBM MQ, which can be exploited by an attacker to trigger a denial of...

6.5CVSS6.8AI score0.00777EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/11/17 12:0 a.m.2 views

IBM MQ Appliance 安全漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A denial of service vulnerability exists in IBM MQ, which can be exploited by an attacker to trigger a denial of...

6.5CVSS6.2AI score0.00777EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.1 views

The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, is related to insufficient validation of input data. Exploiting this vulnerability could all...

10CVSS8AI score0.02154EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/11/15 12:0 p.m.17 views

RUSTSEC-2020-0133 Queue<T> should have a Send bound on its Send/Sync traits

Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

8.1CVSS8.2AI score0.01098EPSS
Exploits1References3
RustSec
RustSec
added 2020/11/15 12:0 p.m.19 views

Queue<T> should have a Send bound on its Send/Sync traits

Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

8.1CVSS3.8AI score0.01098EPSS
Exploits1
Oracle linux
Oracle linux
added 2020/11/12 12:0 a.m.104 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

7.8CVSS7.4AI score0.034EPSS
Exploits6
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:0 a.m.267 views

Oracle Linux 8 : qt5-qtbase / and / qt5-qtwebsockets (ELSA-2020-4690)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4690 advisory. qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the worki...

8.6CVSS7.1AI score0.0293EPSS
Exploits3References6
RedHat Linux
RedHat Linux
added 2020/11/10 1:37 p.m.2 views

kernel: net-sysfs: *_queue_add_kobject refcount issue

A flaw was found in the way the rxqueueaddkobject and netdevqueueaddkobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system...

5.5CVSS7.2AI score0.00439EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/11/10 1:21 p.m.2 views

kernel: net-sysfs: *_queue_add_kobject refcount issue

A flaw was found in the way the rxqueueaddkobject and netdevqueueaddkobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system...

5.5CVSS7.2AI score0.00439EPSS
Exploits0References5
RustSec
RustSec
added 2020/11/10 12:0 p.m.21 views

may_queue's Queue lacks Send/Sync bound for its Send/Sync trait.

Affected versions of mayqueue implements Send/Sync for its Queue type without restricting it to Sendable types and Syncable types. This allows non-Sync types such as Cell to be shared across threads leading to undefined behavior and memory corruption in concurrent programs...

5.9CVSS3.4AI score0.01112EPSS
Exploits1Affected Software1
OSV
OSV
added 2020/11/10 12:0 p.m.12 views

RUSTSEC-2020-0111 may_queue's Queue lacks Send/Sync bound for its Send/Sync trait.

Affected versions of mayqueue implements Send/Sync for its Queue type without restricting it to Sendable types and Syncable types. This allows non-Sync types such as Cell to be shared across threads leading to undefined behavior and memory corruption in concurrent programs...

5.9CVSS5.8AI score0.01112EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.3 views

PT-2020-4778 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows print queue manager service. It allows an attacker to elevate their privileges. Recommendations: At the moment, there...

7.8CVSS7.8AI score0.00981EPSS
Exploits2References8
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.1 views

The vulnerability of the Internal Operations component of the application’s access, organization, and interaction with various types of tasks in the Oracle Universal Work Queue system—a business automation tool within the Oracle E-Business Suite—allows a perpetrator to gain full control over the application.

The vulnerability of the Internal Operations component of the application for accessing, organizing, and interacting with various types of work in the Oracle Universal Work Queue system, a business automation solution from Oracle E-Business Suite, is related to insufficient validation of input...

9CVSS7.7AI score0.01805EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2020/11/04 1:55 a.m.1 views

dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index a UInt is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption...

6.7CVSS7.1AI score0.00378EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2020/11/04 1:33 a.m.2 views

qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails...

7.5CVSS5.7AI score0.0293EPSS
Exploits1References4
Rockylinux
Rockylinux
added 2020/11/03 12:31 p.m.14 views

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...

1.8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:0 a.m.3 views

The vulnerability of the `register_queue_kobjects()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the registerqueuekobjects function in the Linux operating system’s kernel net/core/net-sysfs.c is related to a memory leak issue. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.8CVSS6.5AI score0.03753EPSS
Exploits0References22Affected Software10
CNVD
CNVD
added 2020/10/22 12:0 a.m.3 views

Oracle Universal Work Queue Code Execution Vulnerability

Oracle Universal Work Queue is a flexible work presentation and access tool from Oracle USA. The software provides a centralized view of work, access requests, and organizes work to improve efficiency and productivity. A code execution vulnerability exists in Oracle Universal Work Queue version...

10CVSS9.3AI score0.02154EPSS
Exploits0References1
Rows per page
Query Builder