The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially crafted document or web page...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2019-5222 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.3.1 Description: The issue is related to the wp kses bad protocol function in WordPress, which mishandles the HTML5 colon named entity. This allows attackers to bypass input sanitization. For example, the...

The vulnerability in the McAfee Web Gateway, related to the lack of protection for administrative data, allows attackers to disclose the protected information.

The vulnerability of the McAfee Web Gateway is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

The vulnerability in the software infrastructure of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to disclose protected information or execute arbitrary code.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s web portal software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or execute arbitrary code...

PT-2019-3248 · Exim +2 · Exim +2

Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.92.2 Description: The issue is related to errors in object handling in memory, allowing a remote attacker to gain access to confidential data, disrupt its integrity, and cause a denial of service. It also allows remot...

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms arises from reading data beyond the buffer in memory. This allows attackers to exploit the protected information or cause system failures.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failures...

ntp:fuzz_ntpd_receive: Use-of-uninitialized-value in receive

Detailed Report: https://oss-fuzz.com/testcase?key=5684730627883008 Project: ntp Fuzzing Engine: libFuzzer Fuzz Target: fuzzntpdreceive Job Type: libfuzzermsanntp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: receive fuzzntpdreceive.c fuzzntpdreceive.c...

SQL injection vulnerability in UsualToolCMS backend a***_bo***_ca***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the UsualToolCMS backend aboca.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

The vulnerability of the SymCrypt library in the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the SymCrypt library in the Windows operating system is related to errors in cryptographic transformations. Exploiting this vulnerability can allow an attacker to disclose protected information during the OAEP decryption process...

The vulnerability of RDP servers on Windows operating systems, which allows attackers to disclose sensitive information

The vulnerability of RDP servers on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created application...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document or web page...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

CVE-2019-15637

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...

Multiple Intel Products Session Authentication Vulnerability

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A session authentication vulnerability exists in the system firmware of multiple Intel products, which originates from a program's failure to perform sufficient session authentication and can be exploited by a local attacke...

tw.vlip-gid.lv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-952225 Security Researcher Hchabik Helped patch 2378 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting tw.vlip-gid.lv website and i...

RHEL 7 : Ansible (RHSA-2019:2544)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2544 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 : Ansible (RHSA-2019:2545)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2545 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 / 8 : Ansible (RHSA-2019:2542)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2542 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...