Google Android Denial of Service Vulnerability (CNVD-2019-37164)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in System in Android Q. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Code Execution Vulnerability (CNVD-2019-40996)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A code execution vulnerability exists in System in Android. An attacker can exploit this vulnerability to execute code...

Google Android Information Disclosure Vulnerability (CNVD-2019-37944)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android Q. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker cou...

Google Android Framework Information Disclosure Vulnerability (CNVD-2019-30365)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. An information disclosure vulnerability exists in Framework in Android Q. The vulnerability originates in a networked system or product...

Google Android Information Disclosure Vulnerability (CNVD-2019-38544)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Denial of Service Vulnerability (CNVD-2019-37170)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in System in Android Q. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Information Disclosure Vulnerability (CNVD-2019-38540)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-38548)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Code Execution Vulnerability (CNVD-2019-40998)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A code execution vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit...

Google Android Information Disclosure Vulnerability (CNVD-2019-38547)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-28865)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android Q. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker cou...

CVE-2019-1159

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

CVE-2019-1154

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

The vulnerability of the PAN-OS operating system, related to the lack of protection for mission-critical data, allows attackers to enhance their privileges.

The vulnerability of the PAN-OS operating system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the automated system for managing personal data “Tula” stems from the lack of mechanisms to limit the number of authentication attempts. This allows a perpetrator to select a user password.

The vulnerability of the automated system for managing personal data “Tula” is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor to select a user password remotely...

Ctcms v2.0.2 Arbitrary File Download Vulnerability

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. Ctcms v2.0.2 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files and obtain sensitive information...

CVE-2019-0202

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpoints...

CVE-2019-11696

CVE-2019-11696 affects Mozilla Firefox before 67.0. Files with the .JNLP extension used for Java Web Start are not treated as executable content during download prompts, yet they can be executed if Java is present, enabling a user to inadvertently launch a local executable. Impact details in conn...

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the App...

The vulnerability of the information protection system against unauthorized access: The Strife NT, due to the lack of authentication mechanisms in critical functions, allows attackers to gain access to the file system.

The vulnerability of the information protection system against unauthorized access in the Strife NT system is related to the absence of authentication mechanisms in critical functions. Exploiting this vulnerability allows a malicious actor, operating locally, to gain access to the file system by...