Lucene search
K

129 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.32 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00448EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.53 views

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

8.2CVSS4.9AI score0.00442EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.37 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00448EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.31 views

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.7AI score0.00448EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.39 views

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

8.2CVSS4.9AI score0.00442EPSS
Exploits0References1
NVD
NVD
added 2021/04/14 4:15 p.m.12 views

CVE-2021-27260

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

3.2CVSS0.0049EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/02/10 12:0 a.m.51 views

QEMU Plan 9 File System Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of QEMU. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handling of file...

7.5CVSS2.9AI score0.00317EPSS
Exploits0References1
Mageia
Mageia
added 2020/12/21 9:47 p.m.45 views

Updated virtualbox packages fix security vulnerabilities

Vulnerabilities in the Oracle VM VirtualBox are fixed in version 6.1.16. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability which can lead to execute code in the context of the hypervisor. CVE-2020-14872. An...

8.2CVSS2.8AI score0.00714EPSS
Exploits0References3
NVD
NVD
added 2020/12/01 7:15 p.m.19 views

CVE-2020-28575

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this...

6.7CVSS7.2AI score0.00665EPSS
Exploits0References2
Prion
Prion
added 2020/12/01 7:15 p.m.13 views

Heap overflow

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this...

4.6CVSS7.1AI score0.00665EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/10/30 12:15 a.m.2 views

CVE-2020-27015

Trend Micro Antivirus for Mac 2020 Consumer contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order...

4.4CVSS6AI score0.00885EPSS
Exploits0References2
NVD
NVD
added 2020/10/30 12:15 a.m.31 views

CVE-2020-27014

Trend Micro Antivirus for Mac 2020 Consumer contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the...

6.9CVSS6.4AI score0.00318EPSS
Exploits0References2
Prion
Prion
added 2020/10/30 12:15 a.m.14 views

Information disclosure

Trend Micro Antivirus for Mac 2020 Consumer contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order...

2.1CVSS4.7AI score0.00885EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2020/10/30 12:15 a.m.16 views

Race condition

Trend Micro Antivirus for Mac 2020 Consumer contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the...

6.9CVSS6.3AI score0.00318EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/29 11:45 p.m.33 views

CVE-2020-27015

Trend Micro Antivirus for Mac 2020 Consumer contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order...

4.7AI score0.00885EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/10/26 12:0 a.m.44 views

Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6CVSS3.2AI score0.00885EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/22 12:0 a.m.58 views

Oracle VirtualBox Shader Bytecode Type Confusion Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.8AI score0.00714EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/22 12:0 a.m.47 views

Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.8AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/22 12:0 a.m.31 views

Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.8AI score0.00714EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/20 12:0 a.m.41 views

VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2AI score0.00792EPSS
Exploits0References1
Rows per page
Query Builder