13587 matches found
Cisco IOS XE Command Execution
The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to authentication process errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the underlying operating system...
Intel microprocessor Synchronization Disclosure
The vulnerability of Intel microprogramming software arises from synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
Design/Logic Flaw
A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...
CVE-2019-12677 Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability
A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...
USN-4144-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the XFS file system in the Linux kernel did not properly handle mount failures in some situations. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-20976 Benjamin Moody discovered that the XFS file system...
fly-admin-local-se Component Data Compromise
The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...
Transaction Manager Unauthorized Access
The vulnerability of the Transaction Manager in Windows operating systems is related to data processing errors in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Astra Linux Printcontrol-Web DoS
The vulnerability of the printcontrol-web utility in the Astra Linux operating system is related to data interpretation errors during card filling. Exploiting this vulnerability can allow a perpetrator to cause service failures...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
spice-gtk DoS
The vulnerability of the spice-gtk utility in the Astra Linux operating system is related to errors in the operation of USB devices when ilev-enabled is set in policykit. Exploiting this vulnerability can allow a perpetrator to cause service failures...
DirectWrite Unprotected Access
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by opening a specially...
DirectWrite Unprotected Access
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...
fly-admin-printer Print Manager FLY OS Privilege Escalation
The vulnerability of the fly-admin-printer print manager in the FLY operating system of Astra Linux is related to errors in processing empty tasks, as well as errors in renaming the printer. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain unauthorized...
kscreen DoS
The vulnerability of the kscreen utility for supporting multiple monitors in the Astra Linux operating system is related to scaling errors when changing screen resolutions. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
fly-dm FLY DoS
The vulnerability of the fly-dm component in the FLY operating environment of the Astra Linux system is related to access control errors during command generation. Exploiting this vulnerability can allow an attacker to cause a service failure...
Windows AppX Deployment Server Privilege Escalation
The vulnerability of the Windows AppX Deployment Server component in Windows operating systems is related to errors in connection handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
NX-OS Endpoint Learning DoS
The vulnerability of the Endpoint Learning function in the network operating system NX-OS of Cisco Nexus series 9000 switches is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Firefox ESR Cross- Security Restriction Bypass
The vulnerability of the cross-browser system used for developing WebExtensions extensions in Firefox ESR is related to privilege assignment errors. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
PDF Viewer Component Code Execution
The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...
