splwow64.exe Privilege Escalation

The vulnerability of the executable file splwow64.exe in the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2015-3166

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, a...

CVE-2015-3166

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, a...

CVE-2015-3166

CVE-2015-3166 affects PostgreSQL; the snprintf implementation fails to properly handle errors from system calls, which can lead to information disclosure or other unspecified impact via out-of-memory scenarios. Affected versions include PostgreSQL releases before 9.0.20, 9.1.x before 9.1.16, 9.2....

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

glibc security update

2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

GraphicsMagick Heap Buffer Overflow DoS

The vulnerability of the ReadGIFImage function coder/gif.c in the cross-platform graphics library GraphicsMagick and the console-based graphic editor ImageMagick exists due to errors in object handling in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

CVE-2019-11156

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

Information disclosure

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

CVE-2019-11156

Summary: CVE-2019-11156 affects Intel PROSet/Wireless WiFi Software before version 21.40. The issue is described as logic errors that may allow an authenticated, local attacker to escalate privileges, cause a denial of service, and disclose information. Affected software: Intel PROSet/Wireless Wi...

CVE-2019-11156

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

CVE-2019-11156: Undefined Security Weakness

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-2106)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

PT-2019-3950

Name of the Vulnerable Software and Affected Versions Windows Modules Installer Service affected versions not specified Description The issue is related to the improper disclosure of file information by the Windows Modules Installer Service, potentially allowing unauthorized access to protected...

Xine-lib Heap Buffer Overflow DoS

The vulnerability of the sdpplinparse function in the Xine-lib library is related to errors in number processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

VLC Open Code Execution

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/wav.c file is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .WAV file...

VLC TY demux plugin Code Execution

The vulnerability of the TY demux plugin ty.c in the Media Player software VideoLAN VLC is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .ty file...

NSS-LDAP Obtain Administrator Password

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux is related to privilege management errors. Exploiting this vulnerability could allow a malicious individual to obtain the server LDAP administrator password...

VLC MP4_ReadBox_rdrf Buffer Overflow DoS

The vulnerability of the MP4ReadBoxrdrf function in the VideoLAN VLC media player’s libmp4.c file is related to numerical processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

VLC XSPF Code Execution

The vulnerability of the XSPF component in the VideoLAN VLC media player software is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...