Intel SSD DC Series S4500/S4600 Authentication Bypass

The vulnerability of Microprogrammed Software in Intel SSD DC series S4500 and Intel SSD DC series S4600 storage devices is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges...

Web servers Embedthis GoAhead Appweb DoS

The vulnerability of Embedthis GoAhead and Embedthis Appweb web servers is related to HTTP request processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Linux kernel information disclosure vulnerability (CNVD-2019-38262)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in versions of Linux kernel prior to 4.18.7. The vulnerability stems from errors in configuration and other errors in th...

compat-locales-sap bug fix update

The compat-locales-sap packages provide various compatibility locales for use with SAP Application Servers. Bug Fixes: Scriplet errors during installation BZ1688815 Segmentation fault: core dumped /usr/sbin/build-locale-archive BZ1702200...

eDocLib Error Disclosure

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to an error in the application configuration, which results in the absence of a user-friendly error page. Exploiting this vulnerability allows a malicious actor to disclose system-sensitive information ...

Windows Defender Application Control Constrained Language Bypass

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cisco Identity Services Engine Data Compromise

The vulnerability of the Cisco Identity Services Engine ISE web interface is related to input validation errors. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

splwow64.exe Privilege Escalation

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

DirectWrite Disclosure

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Cross site scripting

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...

CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...

infotocap Heap Buffer Overflow DoS

The vulnerability of the strlensse2pminub function located in the file sysdeps/x8664/multiarch/strlen-sse2-pminub.S:39 in the infotocap utility from the ncurses-bin package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a system failure ...

Windows Privilege Escalation

The vulnerability of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

Cisco RV110W Wireless-N VPN Firewalls DoS

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router web management interfaces is related to authentication process errors. Exploiting this vulnerability can allow an attacker to disable clients...

Microsoft Common Object Runtime Library DoS

The vulnerability of the Microsoft Common Object Runtime Library in the Microsoft .NET Framework is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

Nettle Hash Segmentation Error DoS

The vulnerability of the nettle-hash cryptographic hash function lies in segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure in an application by entering a specially crafted sequence of data into the command line...

connection tool Parallel Port Segmentation Error DoS

The vulnerability of the connection utility to scanners using the parallel port umaxpp is related to segmentation errors. Exploiting this vulnerability can allow a perpetrator to cause a service failure in the application by entering a specially crafted sequence of data into the command line...