9200 matches found
UBUNTU-CVE-2020-12767
exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...
GROWCHAIN Number Error Vulnerability
GROWCHAIN GROW is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'sell' function in GROW's smart contract implementation. A remote attacker could exploit this vulnerability to set a user's balance to an arbitrary value...
Logic Flaw Vulnerability in HashHeroes Tiles
A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles, an ethereum-based guessing game. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...
Lucky9io has a logic flaw vulnerability
Lucky9io is an ethereum-based virtual gambling game.A security vulnerability exists in Lucky9io's implementation of a simple lotto smart contract, which stems from the use of a fallback function to generate random values using the publicly readable variable entrynumber. An attacker could exploit...
Exploit for CVE-2020-11651
It is an exploit module for Apache HTTP Server versions prior to...
KeeWeb 1.14.0 HTML Injection
Document Title: =============== KeeWeb v1.14.0 - Notes Html Inject Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2237 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 2237...
ansible: Information disclosure issue in ldap_attr and ldap_entry modules
A flaw was found in the Ansible Engine when the ldapattr and ldapentry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bindpw in the parameters field. The highest threat from this vulnerability is data...
ansible: Information disclosure issue in ldap_attr and ldap_entry modules
A flaw was found in the Ansible Engine when the ldapattr and ldapentry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bindpw in the parameters field. The highest threat from this vulnerability is data...
ansible: Information disclosure issue in ldap_attr and ldap_entry modules
A flaw was found in the Ansible Engine when the ldapattr and ldapentry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bindpw in the parameters field. The highest threat from this vulnerability is data...
Microsoft Windows KERNELBASE Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
The vulnerabilities of the functions p2m_resolve_translation_fault() and p2m_get_entry() in Xen hypervisors, related to insufficient input data validation, allow attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerabilities of the functions p2mresolvetranslationfault and p2mgetentry in the Xen hypervisor are related to incorrect checks on the root table. Exploitation of these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...
The vulnerability of Xen hypervisors relates to insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of Xen hypervisors is related to an error in the VMX VMEntry function, which does not handle certain cases correctly. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Lunar - A Lightweight Native DLL Mapping Library That Supports Mapping Directly From Memory
A lightweight native DLL mapping library that supports mapping directly from memory Features Imports and delay imports are resolved Relocations are performed Image sections are mapped with the correct page protection Exception handlers are initialised A security cookie is generated and initialise...
No network connectivity on Windows 7-based or Windows Server 2008 R2-based client computers when a DHCPv6 message is sent that has a duplicated DUID
No network connectivity on Windows 7-based or Windows Server 2008 R2-based client computers when a DHCPv6 message is sent that has a duplicated DUID Symptoms Consider the following scenario: You use a DHCP unique identifier DUID as a unique identifier in a network environment. You use DUID and...
CVE-2017-18693
CVE-2017-18693 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.0). A buffer overflow is reported in the fps sysfs entry , with Samsung ID SVE-2016-7510 . Connected sources (Red Hat, CVE listings) corroborate the same description. The documents do not specify affect...
GPAC Resource Management Error Vulnerability (CNVD-2020-23405)
GPAC is an open source multimedia framework. A resource management error vulnerability exists in the libgpac.a file in GPAC version 0.8.0, which stems from a failure of audiosampleentryRead in the isomedia/boxcodebase.c file to correctly determine when to make a gfisomboxdel call. An attacker cou...
PT-2020-2414 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.18 Description: The issue is caused by a conflicting use of HSTATE HOST R1 to store r1 state in kvmppc hv entry plus in kvmppc save,restore tm, leading to a stack corruption. An attacker with the ability to ru...
DEBIAN-CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
UBUNTU-CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...