6504 matches found
Intel Firmware Vulnerabilities - US
Lenovo Security Advisory: LEN-25085 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12201, CVE-2018-12202, CVE-2018-12203, CVE-2018-12204, CVE-2018-12205 Summary Description: Intel has disclos...
Intel Windows 10 Graphics Drivers Riddled With Flaws
Intel has patched 19 vulnerabilities across its popular graphics drivers for Windows 10, including two high-severity flaws. CVE-2018-12216 and CVE-2018-12214 could both allow a privileged user to execute arbitrary code via local access, according to an Intel advisory. “Multiple potential security...
radare2/ia_fuzz: Heap-use-after-free in sdb_free
Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5637729364213760 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...
Project Zero Discloses High-Severity Apple macOS Flaw
Researchers have disclosed what they say is a high-severity security flaw in Apple’s MacOS operating system – which has not yet been patched. The flaw gives an attacker privileges to perform malicious actions on a mounted filesystem – without the victim knowing. The Google Project Zero team...
Google Discloses Unpatched 'High-Severity' Flaw in Apple macOS Kernel
Cybersecurity researcher at Google's Project Zero division has publicly disclosed details and proof-of-concept exploit of a high-severity security vulnerability in macOS operating system after Apple failed to release a patch within 90 days of being notified. Discovered by Project Zero researcher...
Google Discloses Unpatched 'High-Severity' Flaw in Apple macOS Kernel
Cybersecurity researcher at Google's Project Zero division has publicly disclosed details and proof-of-concept exploit of a high-severity security vulnerability in macOS operating system after Apple failed to release a patch within 90 days of being notified. Discovered by Project Zero researcher...
High-Severity SHAREit App Flaws Open Files for the Taking
Two high-severity flaws in the SHAREit Android app allow an attacker to bypass the file transfer application’s device authentication mechanism – and ultimately download content and arbitrary files from the victim’s device, along with a raft of data such as Facebook tokens and cookies. SHAREit is ...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-25444 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2018‑6263, CVE‑2018‑6265, CVE‑2018‑6266 Summary Description: NVIDIA has released a software update for GeForce Experience. This upda...
openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::WelsReorderRefList
Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5752806999326720 Project: openh264 Fuzzer: aflopenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: aflasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address...
Microsoft Confirms Serious 'PrivExchange' Vulnerability
Microsoft acknowledged an elevated privilege flaw in its Exchange Server could allow a remote attacker with a simple mailbox account to gain administrator privileges. Both a Microsoft advisory and a US-CERT alert were issued on Tuesday warning users of the elevation of privilege flaw, dubbed...
Eaton Power Management Software Vulnerability - Lenovo Support US
No description provided...
GHSA-HHXM-4F85-RGR8 High severity vulnerability that affects many_versioned_gem
Logs password in plaintext Impact Logs the password used in plaintext. The password should masked in logs to prevent it leaking. Patches Has the problem been patched? What versions should users upgrade to? Workarounds none See also Are there any links users can visit to find out more information?...
bignum-fuzzer/fuzzer_boringssl_mbedtls_num_len_100_all_operations_num_loops_1: Heap-buffer-overflow in mpi_write_hlp
Detailed report: https://oss-fuzz.com/testcase?key=5167698789531648 Project: bignum-fuzzer Fuzzer: libFuzzerbignum-fuzzerfuzzerboringsslmbedtlsnumlen100alloperationsnumloops1 Fuzz target binary: fuzzerboringsslmbedtlsnumlen100alloperationsnumloops1 Job Type: libfuzzerasanbignum-fuzzer Platform Id...
Yet Another Stars Rating <= 1.8.6 - PHP Object Injection
An unauthenticated PHP object injection in the "Yasr – Yet Another Stars Rating" WordPress plugin introduces a starting point for RCE and similiar high-severity vulnerabilities. As of 27.01.2019, the plugin has over 20.000 active installations and round about 500.000 downloads. A shortcode provid...
Bluetooth “BlueBorne” Vulnerabilities - Lenovo Support US
No description provided...
CVE-2019-2400
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Registration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with networ...
INTEL SA 00203 - PoC Exploitation CVE-2018-18098
Document Title: =============== INTEL SA 00203 - PoC Exploitation CVE-2018-18098 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2179 Video: https://www.youtube.com/watch?v=E49kBAouNY Acknowledgements:...
System x Secure Boot Vulnerability - Lenovo Support US
No description provided...
libreoffice/ww8fuzzer: Crash in __dynamic_cast
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5766621702914048 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cras...