13329 matches found
Connected User Experience Telemetry Service Windows DoS
The vulnerability of the Connected User Experience and Telemetry Service services of Microsoft Windows lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...
Microsoft Excel Office Memory Object Handling RCE
The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Server Message Block SMBv3 Unauthorized Access
The vulnerability of the Microsoft Server Message Block 3.1.1 SMBv3 network protocol implementation in Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Timeshift init_tmp function Heap Buffer Overflow DoS
The vulnerability of the inittmp function TeeJee.FileSystem.vala in the Timeshift system recovery application is caused by synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SAP Business Objects Business Intelligence Platform Code Execution
The vulnerability of the SAP Business Objects Business Intelligence Platform is related to errors in code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Windows Runtime Unauthorized Access
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
389 Directory Server Catalog Service DoS
The vulnerability of the 389 Directory Server catalog service server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
PDF Viewing Privilege Management Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...
ImageGear Store Data Buffer Overflow RCE
The vulnerability of the storedatabuffer function in the ImageGear image processing library is related to conversion errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malicious PNG file...
PDF Viewing Privilege Management Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...
Updated ruby-RubyGems packages fix security vulnerability
Updated ruby-RubyGems package fixes security vulnerabilities The following vulnerabilities have been reported. CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in verbose CVE-2019-8322: Escape sequence injection...
Information Disclosure
microcodectl is vulnerable to information disclosure. An authenticated user is able to obtain confidential information via local access due to cleanup errors...
Cisco Unified Contact Center Express DoS
The vulnerability of the Cisco Unified Contact Center Express operator automation software is related to authentication errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Huawei mobile phone Unauthorized Access
The vulnerability of Huawei’s mobile phone microprogramming software is related to security mechanism errors. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected data...
OpenStack Manila Unauthorized Access
The vulnerability of the openstack-manila software for general access to files is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to common files, provided that the value of the UUID...
GSUP discapper DoS
The vulnerability of the GSUP scanner, a traffic analysis tool for computer networks developed by Wireshark, is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Cisco IOS XE Web Interface Access Bypass
The vulnerability of the Cisco IOS XE operating system’s web interface is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...
Wireshark Packet-IEEE802.11 Component DoS
The vulnerability of the epan/dissectors/packet-ieee80211.c component of the Wireshark network traffic analyzer is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Twisted Jabber XMLStream MITM
The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...