459 matches found
Design/Logic Flaw
DISPUTED GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability."...
CVE-2019-1010025
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability...
The vulnerability of the PostScript Ghostscript file conversion program lies in the improper use of privileged APIs, allowing an attacker to gain access to the file system bypassing restrictions.
The vulnerability of the PostScript Ghostscript file conversion program is related to the improper use of privileged APIs. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the file system by circumventing the restrictions imposed by the -dSAFER option,...
USN-4049-2 glib2.0 vulnerability
USN-4049-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this iss...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...
The vulnerability in the implementation of the Network Driver Interface Standard (NDIS) on Windows operating systems allows a hacker to increase their privileges.
The vulnerability in the implementation of the Network Driver Interface Standard NDIS for Windows operating systems exists due to the lack of checks for buffer size. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...
The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information
The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document...
CVE-2019-6530
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based buffer overflows, which may lead to remote code execution...
CVE-2019-6532
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution...
Vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.
The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
The vulnerability of the win32k component in Windows operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the win32k component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
The vulnerability of the FortiClient for MAC protection mechanism, which stems from deficiencies in access control, allows attackers to trigger a service failure.
The vulnerability of the FortiClient for MAC protection tool is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a service failure using specially created files...
The vulnerability of the snapd package management tool, related to deficiencies in access control, allows a perpetrator to increase their privileges.
The vulnerability of the snapd package management tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...
The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to gain access to protected information
The vulnerability of the Windows operating system’s kernel is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...
CVE-2018-20402
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the...
Nsauditor 3.0.28.0 - Local SEH Buffer Overflow
Exploit Title: Nsauditor Local SEH Buffer Overflow Date: 15-12-2018 Vendor Homepage:http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Exploit Author: Achilles Tested Version: 3.0.28.0 Tested on: Windows XP SP3 1.- Run python code : Nsauditor.py 2.- Open...
ShowDoc Cross-Site Scripting Vulnerability
ShowDoc is an online document sharing tool. A cross-site scripting vulnerability exists in ShowDoc version 1.8.0, which can be exploited by remote attackers to inject arbitrary web script or HTML via a newly created page...
Design/Logic Flaw
jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emai...
CVE-2017-2654
jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emai...