Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service, a component of the Windows operating system, is related to errors in file handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Win32k Unauthorized Access

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Fedora 30 : phpMyAdmin (2019-8f55b515f1)

Upstream announcement : phpMyAdmin 4.9.2 is released 2019-11-22 Welcome to phpMyAdmin 4.9.2, a bugfix release that also contains a security fix. This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an...

ChakraCore JavaScript RCE

The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted web page...

Websites Blob URL Chrome Unauthenticated Access

The vulnerability in the isolation functionality of websites, which arises when using Blob URLs and the Google Chrome browser, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...

NSS Libraries ClientHello Unauthorized Access

The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ReadableStreams Component Code Execution

The vulnerability of the ReadableStreams component in Google Chrome’s Blink web rendering engine is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

Win32k Code Execution

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...

Apache Tomcat Sensitive Information Disclosure

The vulnerability of the Apache Tomcat application server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to disclose sensitive information remotely...

Firefox Reader View Code Execution

The vulnerability of the Firefox Browser’s Reader View function is related to errors in processing cookie files with the SameSite attribute. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Omnibox Component Replacement

The vulnerability of Google Chrome arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to replace the content of the Omnibox component URL by using a specially created HTML page...

Pegasystem PEGA Platform Information Disclosure Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An information disclosure vulnerabili...

USN-4200-1 redmine vulnerabilities

It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. CVE-2019-17427 It was discovered that an SQL injection could allow users to access protected information via a crafted obje...

USN-4200-1: Redmine vulnerabilities

It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. CVE-2019-17427 It was discovered that an SQL injection could allow users to access protected information via a crafted obje...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2019:3060-1)

This update for libpng16 fixes the following issues : Security issues fixed : CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when pngimagefree was called under pngsafeexecute bsc1124211. CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. No...

Ubuntu: Security Advisory (USN-4200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Security Component Privilege Escalation

The vulnerability of the Security component in the Symfony software development and web application management framework is related to session management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

Authentication Privilege Escalation

The vulnerabilities of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL are related to authentication errors. Exploiting these vulnerabilities can allow attackers to enhance their...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page or document...