2915 matches found
Intel 8th Generation Intel Core Processor and 7th Generation Intel Core Processor Privilege Permission and Access Control Issues Vulnerability (CNVD-2020-18568)
The 8th Generation Intel Core Processor and 7th Generation Intel Core Processor are both products of Intel Corporation. 8th Generation Intel Core Processor is an 8th Generation Core Series The 8th Generation Intel Core Processor is an eighth-generation Core series central processing unit CPU, whi...
CVE-2019-1723
A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...
Beijing Changping APP has overstepping access vulnerability
Beijing Changping app is an exclusive mobile news and information software for Beijing Changping area. Beijing Changping App has an override access vulnerability, which can be exploited by attackers to obtain information about other users...
Guizhou statistics release app has override access vulnerability
Guizhou statistics release app is a Bijie area set release of statistical information and participate in the questionnaire survey mobile client. Guizhou Statistics Release app has an override access vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...
Cisco HyperFlex software file access vulnerability
Cisco HyperFlex Software is the United States Cisco Cisco company's set of scalable distributed file system. The system provides unified computing, storage and networking through cloud management, and provides enterprise-class data management and optimization services. A file access vulnerability...
Cisco Prime Collaboration Assurance Authorization Issues Vulnerability
Cisco Prime Collaboration Assurance PCA is a suite of enterprise collaboration network management solutions from Cisco. The product supports a unified management console to simplify the management of unified communications and video collaboration networks, as well as rapid deployment of...
CVE-2019-8372
CVE-2019-8372 affects the LHA.sys driver in LG Device Manager (versions prior to 1.1.1811.2101). The root cause is that the device object has a symbolic link and an open DACL, enabling low-privileged users to read/write arbitrary physical memory via specially crafted IOCTL requests, thereby eleva...
MGASA-2019-0080 Updated gvfs packages fix security vulnerability
The backend currently allows to access and modify files without prompting for password if any polkit authentication agent isn't available. This affects only users which belong to wheel group i.e. those who are already allowed to use sudo. It doesn't allow privilege escalation for users, who don't...
CVE-2019-6545
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI formerly InTouch Machine Edition prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server...
WSD-T13 Cloud Storage Camera (Android Client) Exists with Override Access Vulnerability
Ltd. is an enterprise specializing in the research and development, production, sales and service of security monitoring products. WSD-T13 Cloud Storage Camera Android client suffers from an overstepping access vulnerability. The vulnerability is due to the server on the client request data...
Apache 2.4.x < 2.4.33 Multiple Vulnerabilities
According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.33. It is, therefore, affected by multiple vulnerabilities: - An out of bounds write vulnerability exists in modauthnzldap with AuthLDAPCharsetConfig enabled. An unauthenticated, remote attacker can...
Input validation
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...
CVE-2018-5869
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...
CloudBees Jenkins Mesos Plugin Access Privilege Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. It is mainly used to monitor continuous software release/testing projects and some timed tasks. Mesos Plugin is a plugin that can dynamically start Jenkins slave servers on a...
Google Chrome PDFium Out-of-Bounds Memory Access Vulnerability
Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 51.0.2704.63 previous version of PDFium security vulnerabilities, the vulnerability stems from the program failed to adequately verify the image...
Privilege escalation
An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit...
CVE-2018-20681
The CVE-2018-20681 entry concerns mate-screensaver before 1.20.2 in MATE Desktop Environment. The vulnerability allows physically proximate attackers to view the screen content of a screensaver-locked session and possibly control applications by unplugging/re-plugging or power-cycling external ou...
libcaca illegal write memory access vulnerability (CNVD-2019-08078)
libcaca is a software library that converts images to color ASCII art. An illegal write memory access vulnerability exists in the loadimage function in common-image.c in libcaca 0.99.beta19, which can be exploited by an attacker to execute arbitrary code...
Chamilo LMS SQL Injection Vulnerability (CNVD-2018-26466)
Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. A SQL injection vulnerability exists in the...