11600 matches found
Microsoft Exchange Server CVE-2019-0686 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2010 SP3 Update Rollup 26 Microsoft Exchange Server 2013 Cumulative Update 22 Microsoft...
Microsoft Windows GDI Component CVE-2019-0664 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...
Denial Of Service (DoS)
libspice.so is vulnerable to denial of service. The vulnerability is possible because the function memslotgetvirt lacks the proper boundary checking for slotid array in memslot.c, which is calculated using a QXLPHYSICAL address set by the guest QXL driver, thereby allowing an attacker to input...
Nagios XI CVE-2019-20197 OS Command Injection Vulnerability
Description Nagios XI is prone to an OS command-injection vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands in the context of the affected application. Nagios XI 5.6.9 is vulnerable; other versions may also be affected. Technologies Affected...
bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary
While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 - bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also ...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
Memory corruption
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
UC Berkeley RISE Opaque contains a boundary-check flaw: ocall_malloc may return a pointer into enclave memory, enabling an arbitrary enclave memory write. Affected: UC Berkeley RISE Opaque (pre-2018-12-01). Root cause: missing boundary check on ocall_malloc. Impact: potential memory corruption wi...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
Notepad++: Stack overflow affecting "ext" field on stylers.xml configuration file
Summary: A stack buffer overflow vulnerability affects "ext" field into "stylers.xml" configuration file. "isInList" function doesn't check boundaries on word64 array. Description: Vulnerability src file: notepad-plus-plus/PowerEditor/src/MISC/Common/Common.cpp Vulnerability line: line 329 Variab...
Microsoft Windows 10 - RestrictedErrorInfo Unmarshal Section Handle Use-After-Free
Microsoft Windows 10 - RestrictedErrorInfo Unmarshal Section Handle Use-After-Free Windows: RestrictedErrorInfo Unmarshal Section Handle UAF EoP Platform: Windows 10 1709/1809 Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The WinRT...
Denial Of Service (DoS)
commons-fileupload is vulnerable to denial of service attacks. The vulnerability can be triggered because the HTTP server does not properly filter the file upload requests which has the size of MIME boundary close to the size of the buffer in MultipartStream...
Denial Of Service (DoS) Through Out-of-Bounds Read
libtasn1.so is vulnerable to denial of service DoS attacks. The library contains multiple missing boundary checks, allowing a malicious user to pass ASN.1 input to cause an out-of-bounds read that can crash the application...
Microsoft Windows 10 - COM Desktop Broker Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: COM Desktop Broker Elevation of Privilege Platform: Windows 10 1809 almost certainly earlier versions as well. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: AppContainer Sandbox Summary: The...
Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Open Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: DSSVC DSOpenSharedFile Arbitrary File Open EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m reporti...
Microsoft Windows 10 - Browser Broker Cross Session Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: Browser Broker Cross Session EoP Platform: Windows 10 1803 not tested anything else. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: Session Boundary Summary: The Browser Broker COM object...
Microsoft Windows 10 - DSSVC MoveFileInheritSecurity Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: DSSVC MoveFileInheritSecurity Multiple Issues EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m...
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: SSPI Network Authentication Session 0 EoP Platform: Windows 10 1803/1809 not tested earlier versions Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: Session boundary Summary: Performing an NTLM...
libgd CVE-2019-6978 Double Free Multiple Denial of Service Vulnerabilities
Description libgd is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause a denial-of-service condition. libgd version 2.2.5 is vulnerable; other versions may also be affected. Technologies Affected LibGD LibGD 2.1.0 LibGD LibGD 2.1.1 LibGD LibGD 2.2.0...