11601 matches found
DOSBox Buffer Overflow Vulnerability
DOSBox is a DOS emulator based on the SDL library. A buffer error vulnerability exists in DOSBox version 0.74-2, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in incorrect read and write operations...
The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, is related to improper checking of boundaries. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially created HTTP request...
HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series buffer overflow vulnerability (CNVD-2019-23317)
HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series are printer products introduced by Hewlett-Packard HP. A buffer overflow vulnerability exists in the HP Color LaserJet Pro M280-M281 Multifunction Printer series prior to version 20190419 a...
Microsoft Windows Font Cache Service - Insecure Sections Privilege Escalation Exploit
Windows: Windows Font Cache Service Insecure Sections EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The Windows Font Cache Service exposes section objects insecurely to low privileged...
Microsoft Windows - CmpAddRemoveContainerToCLFSLog Arbitrary File/Directory Creation Exploit
Windows: CmpAddRemoveContainerToCLFSLog Arbitrary File/Directory Creation EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The kernel’s CmpAddRemoveContainerToCLFSLog function doesn’t...
Microsoft Windows Font Cache Service - Insecure Sections Privilege Escalation
Windows: Windows Font Cache Service Insecure Sections EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The Windows Font Cache Service exposes section objects insecurely to low privileged...
RDK CcspPandM Module Buffer Overflow Vulnerability
RDK is a suite of modular, portable, and customizable open source IoT software solutions from the RDK Management community. ccspPandM is one of the modules used to implement the core configuration and management functions of the device. A buffer error vulnerability exists in the...
Microsoft Windows - 'CmpAddRemoveContainerToCLFSLog' Arbitrary File/Directory Creation
Windows: CmpAddRemoveContainerToCLFSLog Arbitrary File/Directory Creation EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The kernel’s CmpAddRemoveContainerToCLFSLog function doesn’t...
Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2019-18601)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer overflow vulnerability exists in the WLAN functionality in multiple Qualco...
WLAN buffer overflow vulnerability in multiple Qualcomm products
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product.WLAN is one of the wireless LAN components. A buffer overflow vulnerability exists i...
Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-18839)
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A buffer overflow vulnerability exists ...
TP-LINK TL-WR940N and TL-WR941ND Buffer Overflow Vulnerability
The TP-Link TL-WR940N and TP-Link TL-WR941ND are both wireless routers from China P&L TP-Link. A buffer overflow vulnerability exists in the TP-LINK TL-WR940N and TL-WR941ND. The vulnerability stems from a network system or product performing an operation in memory without properly validating dat...
The vulnerability of the microprogrammed logic controller Modicon, related to errors in buffer boundary control in memory, allows a intruder to cause a service failure.
The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in buffer boundary control in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted Modbus packet...
radare2 denial of service vulnerability (CNVD-2019-18609)
radare2 is a set of libraries and tools for working with binary files. A buffer error vulnerability exists in radare2 3.5.1 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...
The vulnerability of the microprogrammed programmable logic controller Modicon, related to the violation of trust boundaries, allows a intruder to gain unauthorized access by performing a “forceful” attack against the Modbus protocol.
The vulnerability of the microprogrammed logic controllers from Modicon relates to the violation of trust boundaries during connection. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access by performing a “forceful” attack using the Modbus protocol...
Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2019-42732)
The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer overflow vulnerability exists in the system firmware in the Intel NUC Kit. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries...
Xen CVE-2019-17349 Denial of Service Vulnerability
Description Xen is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1 Xen Xen 3.1.3 Xen Xen 3.1.4 Xen Xen 3.2 Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2 X...
Microsoft Windows GDI Component CVE-2019-1009 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...
Microsoft Windows GDI Component CVE-2019-1012 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows GDI Component CVE-2019-1049 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...