Lucene search
+L

1606 matches found

ATTACKERKB
ATTACKERKB
added 2020/12/14 10:15 p.m.4 views

CVE-2020-0460

In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.5CVSS5.7AI score0.00738EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/12/14 10:15 p.m.5 views

CVE-2020-0463

In sdpserverhandleclientreq of sdpserver.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.5CVSS5.7AI score0.01396EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/12/14 10:15 p.m.4 views

CVE-2020-0470

In extendframehighbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11...

5.5CVSS6AI score0.00691EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/12/14 12:0 a.m.3 views

PT-2020-11807 · Google +1 · Android +1

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11 Description: A heap buffer overflow in the extend frame highbd function of restoration.c could lead to a possible out of bounds write, resulting in remote information disclosure. This issue can b...

5.5CVSS5.6AI score0.00691EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.2 views

PT-2020-5231 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in handling objects in memory, which can allow a remote attacker to gain access to protected information. This can lead to the disclosure of...

9CVSS9AI score0.70632EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.8 views

The vulnerability of Adobe Reader Mobile software, related to deficiencies in access control, allows a perpetrator to disclose protected information.

The vulnerability of Adobe Reader Mobile software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

6.5CVSS5.8AI score0.02257EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.3 views

PT-2020-5216 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: The issue is related to errors in...

6.8CVSS4.9AI score0.02986EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.7 views

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, stems from insufficient verification of input data. This vulnerability allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

4CVSS6.5AI score0.00863EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.6 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, which allows attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

6.8CVSS5.8AI score0.02895EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.8 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

6.8CVSS6.5AI score0.03842EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.10 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

6.8CVSS6.5AI score0.03842EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.7 views

PT-2020-4693 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to disclose protected information. It affects the Chakra scripting engine, potentially enablin...

7.6CVSS4.3AI score0.01913EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.6 views

The vulnerability of the SAP Gateway development environment is related to the lack of protection for operational data, which allows attackers to disclose sensitive information.

The vulnerability of the SAP Gateway development environment is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information due to improperly set HTTP headers such as cache-control and...

5.3CVSS5.8AI score0.01111EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2020/11/04 1:20 a.m.5 views

libvpx: Out of bounds read in vp8_norm table

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483...

7.5CVSS6AI score0.05092EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:0 a.m.9 views

The vulnerability of the Tricon Communications Module, related to the lack of protection for operational data, allows attackers to disclose the protected information.

The vulnerability of the Tricon Communications Module is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

7.8CVSS7.2AI score0.01308EPSS
SaveExploits0References4Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.13 views

The vulnerability of the Undertow web server arises from insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of the Undertow web server is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

7.8CVSS6.2AI score0.03412EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.8CVSS7.7AI score0.03063EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.8CVSS7.7AI score0.03561EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

4.3CVSS7AI score0.02629EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.1CVSS7.4AI score0.03128EPSS
SaveExploits0References3
Rows per page
Query Builder