102 matches found
VulnCheck KEV: CVE-2019-1225
An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...
Google TensorFlow 缓冲区错误漏洞
Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow 'tf.rawops.SdcaOptimizerV2'. An attacker can exploit this vulnerability to obtain sensitive information...
The vulnerability of the Windows Hello face recognition component on Microsoft Windows operating systems allows a perpetrator to bypass security measures.
The vulnerability of the Windows Hello facial recognition component on Microsoft Windows operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to bypass security measures...
The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Linux operating system’s kernel is related to incorrect initialization of process identifiers. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the driver/firmware/EFI code of the Linux operating system allows a hacker to bypass security restrictions.
The vulnerability in the driver/firmware/EFI code of the Linux operating system relates to bypassing security functions. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures...
The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to cause a service failure.
The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
hw: Vector Register Leakage-Active
A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...
The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Kernel component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data.
The vulnerability of the Kernel component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...
hw: Vector Register Leakage-Active
A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...
sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations
A NULL pointer dereference was found in SQLite in the way it executes select statements with column optimizations. An attacker who is able to execute SQL statements can use this flaw to crash the application...
The vulnerability of the Windows operating system, related to errors in processing memory objects, allows attackers to escalate their privileges.
The vulnerability of the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Gold Reward has a flawed logic vulnerability
Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...
Arbitrary File Deletion Vulnerability in WeCenter Learning Free Edition
WeCenter is an open source knowledge-based social Q&A community program. An arbitrary file deletion vulnerability exists in the free version of WeCenter Learning, which can be exploited by an attacker to delete arbitrary files from the server...
PaulyCoin has a logic flaw vulnerability
PaulyCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PaulyCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24723)
Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...
Multiple Microsoft Products Permission License and Access Control Issues Vulnerabilities
Microsoft Forefront Endpoint Protection is a set of endpoint security software. Microsoft Security Essentials is a set of free antivirus software that comes with Windows. Microsoft Windows Defender is a set of antivirus software that comes with Windows. The vulnerability exists in a number of...
WordPress note-press plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. note-press is a WordPress admin panel annotation plugin used in it. A SQL injection vulnerability exists in the WordPress note-pre...
Google Android System Component Information Disclosure Vulnerability (CNVD-2019-21264)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android. An attacker can exploit this vulnerability to obtain sensitive information...