2534 matches found
CVE-2018-17148
An Insufficient Access Control vulnerability leading to credential disclosure in coreconfigsnapshot.php aka configuration snapshot page in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials...
KLA11513 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...
The vulnerability of the Intel Turbo Boost Max Technology driver installation program allows a hacker to increase their privileges.
The vulnerability of the Intel Turbo Boost Max Technology driver installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Logic Flaw Vulnerability in eXtplorer Login Interface
eXtplorer is a file management based on PHP and ExtJS development of the text based on PHP and ExtJS development of the file management of the file management device manager . A logic flaw vulnerability exists in the eXtplorer login interface, which can be exploited by an attacker to gain server...
KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
The vulnerability of microprogramming software in Intel Active Management Technology arises due to insufficient testing of input data, allowing attackers to exploit their privileges.
The vulnerability of Intel Active Management Technology’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Influxdb Authentication Bypass Vulnerability
InfluxDB is an open source temporal database developed by InfluxData. Influxdb suffers from an authentication bypass vulnerability that can be exploited by an attacker to gain control of the database and arbitrarily perform add, delete, or change operations...
KLA11485 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A deni...
CVE-2019-11888
Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...
File Upload Vulnerability in Crooked Cool CMS
Crooked Cool CMS is a content management system. A file upload vulnerability exists in Crooked Cool CMS, which can be exploited by attackers to gain control of a web server...
EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1479)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The nttywrite function in drivers/tty/ntty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the...
Arbitrary File Deletion Vulnerability in CatfishCMS Backend
CatfishCMS is open source and free PHP CMS web content management system. A file arbitrary deletion vulnerability exists in the CatfishCMS backend. Attackers can use the vulnerability to obtain server privileges...
CVE-2019-6566
GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an attacker to gain administrator privileges to the system...
Memory Corruption Vulnerability in KGL_WIN
KGLWIN is a PLC programming software. A memory corruption vulnerability exists in KGLWIN's handling of kpr project files, which can be exploited by an attacker to gain control of a user's system or crash the program...
Siemens SINEMA Unauthorized Access Vulnerability
Siemens is a leading global technology company providing solutions to customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. An unauthorized...
The vulnerability of the Windows AppX Deployment Server component of the operating system allows a hacker to gain control over the system.
The vulnerability of the Windows AppX Deployment Server component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a perpetrator to gain control over the system through a specially created application...
Cryptocurrency businesses still being targeted by Lazarus
It's hardly news to anyone who follows cyberthreat intelligence that the Lazarus APT group targets financial entities, especially cryptocurrency exchanges. Financial gain remains one of the main goals for Lazarus, with its tactics, techniques, and procedures constantly evolving to avoid detection...
KLA11439 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities was found in Mozilla Firefox. Malicious users can exploit this vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges and spoof user interface. Original advisories Mozilla Foundation Security Advisory 2019-07...
The installation program of the Intel Parallel Studio XE for Windows toolset is vulnerable, allowing attackers to exploit their privileges.
The vulnerability of the Intel Parallel Studio XE for Windows toolset installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...