13584 matches found
QEMU Media Transfer Protocol Unauthorized Access
The vulnerability of the QEMU implementation of the Media Transfer Protocol is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information...
Samba Access Control Error
The vulnerability of Samba software is related to errors in access control. Exploiting this vulnerability can allow a perpetrator to compromise data integrity and cause service failures...
Windows Function Discovery Privilege Escalation
The vulnerability of the Windows Function Discovery service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...
Windows COM Server Privilege Escalation
The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
SUSE-SU-2020:0468-1 Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.26.4 fixes the following issues: Security issues fixed: - CVE-2019-8835: Fixed multiple memory corruption issues bsc1161719. - CVE-2019-8844: Fixed multiple memory corruption issues bsc1161719. - CVE-2019-8846: Fixed a use-after-free issue bsc1161719. -...
EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1180)
According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls...
ATutor 2.2.4 - (id) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: ATutor 2.2.4 - 'id' SQL Injection Exploit Author: Andrey Stoykov Vendor Homepage: https://atutor.github.io/ Software Link: https://sourceforge.net/projects/atutor/files/latest/download Version: ATutor 2.2.4 Tested on: LAMP on...
win32k Privilege Escalation
The vulnerability of the win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Windows Cryptography Next Generation Disclosure
The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Auto-Maskin Equipment: RP 210E Remote Panels, DCU 210E Control Units, and Marine Observer Pro Android App Vulnerabilities: Cleartext Transmission of Sensitive Information, Origin Validation Error,...
openSUSE Security Update : rmt-server (openSUSE-2020-235)
This update for rmt-server to version 2.5.2 fixes the following issues : Security issue fixed : - CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed : - Relaxed systemd units dependencies bsc1160673 - Added more verbose error reporting for SCC...
Security update for rmt-server (important)
openSUSE Security Update: Security update for rmt-server Announcement ID: openSUSE-SU-2020:0235-1 Rating: important References: 1141122 1157119 1160673 1160922 Cross-References: CVE-2019-18904 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has three fixes is now...
Vanilla Forums Information Disclosure Vulnerability
Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . An information disclosure vulnerability exists in Vanilla Forums versions prior to 2.0.17.9. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An...
Denial of Service
Overview Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as oppose...
sqlite: error mishandling because of incomplete fix of CVE-2019-19880
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...
go-toolset:ol8 security update
go-toolset 1.12.12-1 - Update for golang package fixes 1.12.12-1 - Bump version to 1.12.12 golang 1.12.12-4.0.1 - from upstream https://github.com/golang/go/issues/2775 - move arbitrary value 10% to 15% for GC tests, hits 10.48% on our - infrastructure - Resolves failing post build tests Orabug:...
Firefox Confidential Data Access
The vulnerability of Firefox browsers is related to errors in permission settings. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...
FTP DoS
The vulnerability of the FTP file transfer protocol in Firefox browsers is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
SAP Mobile Platform SDK Resource Management Error
The vulnerability of the SAP Mobile Platform SDK, a software development platform, is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...