464 matches found
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the network component of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential information through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Qualcomm ARM operating system Android is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...
CVE-2016-1209
creationtimestamp| type| source ---|---|--- 2016-05-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41692 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wpninjaformsunauthenticatedfileupload.rb 2025-02-06...
The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created...
CVE-2016-3134
creationtimestamp| type| source ---|---|--- 2016-03-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39545...
chromium-browser: use-after-free in Blink
extensions/renderer/renderframeobservernatives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecifie...
Customer can see Internal Comment created by Automation Action
h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...
Customer can see Internal Comment created by Automation Action
h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the handling of objects in memory. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially created application...
Red Hat Automatic Bug Reporting Tool Arbitrary File Write Vulnerability
Red Hat Automatic Bug Reporting Tool ABRT is a set of automated bug detection and reporting tools from Red Hat Red Hat. A security vulnerability exists in the abrt-action-install-debuginfo-to-abrt-cache help program in Red Hat ABRT versions prior to 2.7.1. A local attacker can exploit the...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the libmedia library in the Android operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Mac OS X operating system allows a hacker to arbitrarily change user passwords.
The vulnerability of the Apple ID OD plugin for the Mac OS X operating system is related to the management of access parameters. Exploiting this vulnerability allows a malicious actor to arbitrarily change user passwords using the created application...
The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.
The vulnerability of the Windows operating system exists due to improper handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...
EasyCTF vulnerable to cross-site scripting
Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a cross-site scripting vulnerability CWE-79 that can be leveraged by an attacker created account. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
Cisco Unified MeetingPlace Web Services Directory Cross-Site Request Forgery Vulnerability
Cisco Unified MeetingPlace conferencing solutions allow organizations to host integrated voice, video, and web conferences. A cross-site request forgery vulnerability exists in the SOAP API endpoint of the web-services directory in Cisco Unified MeetingPlace version 8.6 1.9, which can be exploite...
[SECURITY] [DSA 3046-1] mediawiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3046-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 05, 2014 http://www.debian.org/security/faq -...
CVE-2014-4618
EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object...
