Lucene search
+L

11885 matches found

CNVD
CNVD
added 2019/08/27 12:00 a.m.14 views

Google Android Information Disclosure Vulnerability (CNVD-2019-37942)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android Q suffers from an information disclosure vulnerability. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker...

7.5CVSS6.2AI score0.00804EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/08/27 12:00 a.m.10 views

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS5.4AI score0.01639EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/08/26 12:00 a.m.45 views

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38575)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

6.5CVSS6.1AI score0.00732EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/26 12:00 a.m.10 views

Google Android Information Disclosure Vulnerability (CNVD-2019-37952)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. An information disclosure vulnerability exists in System in Android Q. The vulnerability is due to the fact that the system is not compatible with Google and the OHA. The vulnerability...

5.5CVSS6.1AI score0.00139EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/26 12:00 a.m.12 views

Google Android Information Disclosure Vulnerability (CNVD-2019-38548)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

5.5CVSS6.1AI score0.00139EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/26 12:00 a.m.5 views

Google Android Information Disclosure Vulnerability (CNVD-2019-38544)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

6.5CVSS6.1AI score0.00746EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/23 12:00 a.m.6 views

Google Android Information Disclosure Vulnerability (CNVD-2019-28864)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android Q suffers from an information disclosure vulnerability. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker...

7.5CVSS6.2AI score0.00804EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:00 a.m.12 views

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL involves errors in code generation. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

4.4CVSS5.6AI score0.01815EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:00 a.m.15 views

The vulnerability of the Role-Based Access Control (RBAC) implementation for Etcd configuration storage allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Role-Based Access Control RBAC implementation for the Etcd configuration store is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a request via the...

9.3CVSS7.8AI score0.04031EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:00 a.m.9 views

The vulnerability in the web-based administration interface of Cisco Adaptive Security Appliance (ASA) allows a attacker to increase their privileges.

The vulnerability of the Cisco Adaptive Security Appliance ASA network interface management web interface is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through specially crafted HTTP requests...

9CVSS5.5AI score0.01593EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/08/19 12:00 a.m.14 views

Open-Xchange OX App Information Disclosure Vulnerability (CNVD-2019-40057)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

8.1CVSS6.1AI score0.01683EPSS
SaveExploits3References1
CNVD
CNVD
added 2019/08/19 12:00 a.m.15 views

Open-Xchange OX App Information Disclosure Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

8.1CVSS6.1AI score0.01683EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:00 a.m.14 views

The vulnerability of the Site Isolation function in Google Chrome web browsers allows attackers to circumvent existing security restrictions.

The vulnerability of Site Isolation in the Google Chrome web browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using a specially crafted web page...

4.3CVSS7.8AI score0.00739EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:00 a.m.18 views

The vulnerability of the Windows operating system’s DHCP client allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s DHCP client is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially crafted packets that simulate DHCP server responses...

8.8CVSS6AI score0.03968EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/08/15 12:00 a.m.14 views

Sean Barrett stb_vorbis Number Error Vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A numeric error vulnerability exists in the 'predictpoint' function in versions 2019-03-04 and earlier. The vulnerability stems from a networked system or product not properly calculating or...

5.5CVSS7.1AI score0.01034EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/08/14 12:00 a.m.108 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4093-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4093-1 advisory. It was discovered that a heap buffer overflow existed in the Marvell Wireless LAN device driver for the Linux kernel. An attacker could use this to cause...

9.8CVSS7.8AI score0.52199EPSS
SaveExploits28References8
Tenable Nessus
Tenable Nessus
added 2019/08/14 12:00 a.m.141 views

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4094-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4094-1 advisory. It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could...

9.8CVSS8AI score0.52199EPSS
SaveExploits38References33
Microsoft KB
Microsoft KB
added 2019/08/13 7:00 a.m.3168 views

August 13, 2019—KB4512506 (Monthly Rollup)

None None...

9.8CVSS6.8AI score0.29051EPSS
SaveExploits12
Oracle linux
Oracle linux
added 2019/08/13 12:00 a.m.68 views

bind security, bug fix, and enhancement update

32:9.11.4-9.P2 - Fix CVE-2019-6471 32:9.11.4-8.P2 - Fix scriptlet errors when selinux-policy is not installed 1647659 32:9.11.4-7.P2 - Fix inefective limit of TCP clients CVE-2018-5743 32:9.11.4-6.P2 - Use /sbin/nologin again 1676661 32:9.11.4-5.P2 - Make sure selinux-policy is installed soon...

7.5CVSS0.2AI score0.06457EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/08/13 12:00 a.m.8 views

PT-2019-3066 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

7.6CVSS8.3AI score0.01934EPSS
SaveExploits0References7
Rows per page
Query Builder