Lucene search
K

5048 matches found

OSV
OSV
added 2020/10/23 6:15 p.m.5 views

CVE-2020-5978

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCALSYSTEM privileges which may lead to a denial of service or escalation of privileges...

7.8CVSS7.1AI score0.00319EPSS
Exploits0References1
Prion
Prion
added 2020/10/23 6:15 p.m.26 views

Design/Logic Flaw

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCALSYSTEM privileges which may lead to a denial of service or escalation of privileges...

4.6CVSS7.7AI score0.00319EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/10/22 7:15 p.m.2 views

CVE-2020-9986

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

3.3CVSS6.9AI score0.00921EPSS
Exploits0References2
NVD
NVD
added 2020/10/22 7:15 p.m.20 views

CVE-2020-9986

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

4.3CVSS0.00921EPSS
Exploits0References2
Prion
Prion
added 2020/10/22 7:15 p.m.16 views

Design/Logic Flaw

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

4.3CVSS3.5AI score0.00921EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/10/22 6:6 p.m.63 views

CVE-2020-9986

CVE-2020-9986 affects macOS Find My / Offline Finding in Catalina. The root issue is a file access vulnerability where cached rolling advertisement keys and related location data could be exposed via a malicious macOS application reading home-folder files. Threat research described two flaws: (1)...

4.3CVSS4.2AI score0.00921EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/10/21 1:7 p.m.3 views

MGASA-2020-0391 Updated claw-mail packages fix a security vulnerability

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree CVE-2020-16094...

7.5CVSS7.5AI score0.01781EPSS
Exploits1References3
Veracode
Veracode
added 2020/10/18 1:47 a.m.18 views

Denial Of Service (DoS)

claws-mail is vulnerable to denial of service DoS. The vulnerability exists in imapscantreerecursive where a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

7.5CVSS3.3AI score0.01781EPSS
Exploits1References7Affected Software1
Hacker One
Hacker One
added 2020/10/17 9:59 a.m.10 views

Acronis: DLL Hijacking when creating Rescue Media Builder leading to Privilege Escalation

Vulnerability description not provided...

7.1AI score
Exploits0
Prion
Prion
added 2020/10/16 11:15 p.m.11 views

Information disclosure

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...

2.1CVSS4.9AI score0.00865EPSS
Exploits0References1Affected Software3
Prion
Prion
added 2020/10/16 11:15 p.m.19 views

Information disclosure

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...

2.1CVSS4.9AI score0.00883EPSS
Exploits0References1Affected Software3
CVE
CVE
added 2020/10/16 10:17 p.m.126 views

CVE-2020-16941

CVE-2020-16941 describes an information-disclosure vulnerability in Microsoft SharePoint Server where, on certain pages, the server improperly discloses the folder structure by revealing the folder path of scripts loaded on the page. An attacker must have access to the affected SharePoint page to...

5.5CVSS5AI score0.00883EPSS
Exploits0References1Affected Software3
OSV
OSV
added 2020/10/15 9:15 p.m.12 views

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS6.8AI score
Exploits0References6
Cvelist
Cvelist
added 2020/10/15 8:30 p.m.18 views

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.6AI score0.01977EPSS
Exploits0References6
0day.today
0day.today
added 2020/10/15 12:0 a.m.16 views

Guild Wars 2 - Insecure Folder Permissions Vulnerability

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild Wars 2 Launcher...

7.4AI score
Exploits0
Hacker One
Hacker One
added 2020/10/14 1:17 p.m.9 views

Acronis: DLL Hijacking when sending feedback and crash report leading to Privilege Escalation

Vulnerability description not provided...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2020/10/14 12:0 a.m.328 views

Guild Wars 2 Insecure Folder Permissions

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2020/10/14 12:0 a.m.413 views

Guild Wars 2 - Insecure Folder Permissions

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...

7.4AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2020/10/13 7:0 a.m.33 views

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...

5.5CVSS1.2AI score0.00883EPSS
Exploits0
0day.today
0day.today
added 2020/10/13 12:0 a.m.17 views

Battle.Net 1.27.1.12428 - Insecure File Permissions Vulnerability

Exploit Title: Battle.Net 1.27.1.12428 - Insecure File Permissions Exploit Author: George Tsimpidas Software Link : https://www.blizzard.com/en-gb/download/ Battle Net Desktop Version Patch: 1.27.1.12428 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability...

0.1AI score
Exploits0
Rows per page
Query Builder