D-Link DIR-600M WAN.htm Unauthorized Access Configuration

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and modify configuration settings...

Windows Defender Vulnerable Service

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow attackers to trigger false alerts and incorrect responses by Windows Defender services...

StartTileData.dll Code Execution

The vulnerability of the StartTileData.dll library in the Windows operating system is related to errors during the creation of files in protected directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created...

Firefox Thunderbird DoS

The vulnerability of the compatibility functions in JavaScript-based browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to cause service failures during API...

CVE-2019-19767

The Linux kernel before 5.4.2 mishandles ext4expandextraisize, as demonstrated by use-after-free errors in ext4expandextraisize and ext4xattrsetentry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163...

Design/Logic Flaw

The Linux kernel before 5.4.2 mishandles ext4expandextraisize, as demonstrated by use-after-free errors in ext4expandextraisize and ext4xattrsetentry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163...

CVE-2019-19767

The Linux kernel before 5.4.2 mishandles ext4expandextraisize, as demonstrated by use-after-free errors in ext4expandextraisize and ext4xattrsetentry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163...

Kakadu Software SDK Numeric Error Vulnerability

Kakadu Software SDK is a set of JPEG2000 software development kits SDK from Kakadu Software, Australia. A numeric error vulnerability exists in the 'derivetapsandgains' function of the kduv7ar.dll file in version 7.10.2 of the Kakadu Software SDK, which arises from a networked system or product...

CVE-2019-0404

SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...

New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage

A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that encrypts extremely sensitive data to shield it from attackers even when a system gets compromised. Dubbed Plundervolt and tracked as...

PT-2019-5990

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2019.021.20056 and earlier Adobe Acrobat and Reader versions 2017.011.30155 and earlier Adobe Acrobat and Reader versions 2015.006.30505 and earlier Description The issue is related to a security bypass...

Windows iphlpsvc DLL Privilege Escalation File Modification

The vulnerability of the iphlpsvc.dll library in the Windows operating system is related to errors during file creation. Exploiting this vulnerability can allow attackers to enhance their privileges and modify arbitrary files using a specially created application...

Siemens RUGGEDCOM ROS (Update A)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Google Chrome DevTools UI Replacement

The vulnerability of Google Chrome’s DevTools component is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created Chrome extension...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service, a component of the Windows operating system, is related to errors in file handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Oilpan Component Google Chrome Data Compromise

The vulnerability of the Oilpan component in the Google Chrome browser is caused by synchronization errors when using a common resource. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a...

Docker Harbor Registry Privilege Escalation

The vulnerability of the Docker container Harbor registry is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges and gain unauthorized access to adjacent projects...

Blink Display Module Manipulation

The vulnerability of the Blink display module in Google Chrome browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to perform domain spoofing using a specially created HTML page...

Privilege Escalation

The vulnerability of the compatibility subsystem for running Linux applications stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

SAP Diagnostics Agent Information Disclosure Vulnerability

SAP Diagnostics Agent is a system diagnostic agent program from SAP. An information disclosure vulnerability exists in SAP Diagnostics Agent. The vulnerability arises from a configuration or other error in the operation of a networked system or product. An attacker could exploit this vulnerabilit...