CVE-2020-0658

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'...

The vulnerability of the Database Gateway for ODBC component in the Oracle Database Server database management system allows a hacker to gain access to modify, add, or delete data, or to cause partial service interruption.

The vulnerability of the Oracle Database Server ODBC driver’s database server lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to remotely modify, add, or delete data, or cause a partial service failure using the OracleNet network protocol...

CVE-2020-8808

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...

The vulnerability in the driver drivers/net/can/usb/peak_usb/pcan_usb_fd.c of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the driver drivers/net/can/usb/peakusb/pcanusbfd.c of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the driver/drivers/media/usb/ttusb-dec/ttusb_dec.c file of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the driver/drivers/media/usb/ttusb-dec/ttusbdec.c file of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...

The vulnerability in the driver drivers/input/ff-memless.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/input/ff-memless.c file of the Linux operating system relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver drivers/net/can/usb/peak_usb/pcan_usb_pro.c of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the driver drivers/net/can/usb/peakusb/pcanusbpro.c of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the wlc_wpa_sup_eapol driver from Broadcom Wi-Fi devices allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the wlcwpasupeapol driver for Broadcom Wi-Fi devices is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending specially crafted Wi-Fi packets containing data exceeding 32 bytes...

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615...

The vulnerability in the driver drivers/net/wireless/ath/ath9k/htc_hst.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wireless/ath/ath9k/htchst.c kernel of the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Intel Smart Sound Technology driver, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Intel Smart Sound Technology driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

The vulnerability of the Intel Smart Sound Technology driver, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Intel Smart Sound Technology driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

The vulnerability of the mwifiex_process_country_ie() function (driver/net/wireless/marvell/mwifiex/sta_ioctl.c) in the Marvell WiFi driver for the Linux operating system exists due to a buffer overflow issue. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mwifiexprocesscountryie function driver/net/wireless/marvell/mwifiex/staioctl.c in the Marvell WiFi driver for the Linux operating system is related to memory buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data,...

Denial Of Service (DoS)

github.com/mongodb/mongo-go-driver is vulnerable to denial of serviceDoS attacks. The library does not properly validate the length of BSON value in the ReadLength and ReadElement functions in bsoncore.go, leading to an integer overflow and an application crash...

The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2019-5098

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

DEBIAN-CVE-2019-19536

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka CID-ead16e53c2f0...

CVE-2019-19537

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c...

CVE-2019-18279

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse impacts are limited to the Windows environment and there is no known direct impact to the UEFI firmware. This was fixed in late June 2019...