Lucene search
+L

11337 matches found

osv_cve
osv_cve
•added 2020/07/17 11:15 p.m.•27 views

CVE-2020-9227

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

5.5CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/17 11:15 p.m.•32 views

Design/Logic Flaw

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

4.3CVSS5.3AI score0.00469EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/07/17 11:15 p.m.•16 views

CVE-2020-9227

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

5.5CVSS6AI score0.00469EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/07/17 10:30 p.m.•49 views

CVE-2020-9227

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

5.4AI score0.00469EPSS
SaveExploits0References1
CVE
CVE
•added 2020/07/17 10:30 p.m.•68 views

CVE-2020-9227

CVE-2020-9227 affects Huawei Moana-AL00B smartphones with firmware older than 10.1.0.166, due to missing initialization of resources from improper parameter initialization. This may allow an attacker to trick a user into installing and executing a crafted app, potentially causing device exception...

5.5CVSS5.3AI score0.00469EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/17 12:00 a.m.•12 views

CVE-2020-9227: Missing Initialization of Resource

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

5.5CVSS5.8AI score0.00469EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/07/17 12:00 a.m.•8 views

PT-2020-20527

Name of the Vulnerable Software and Affected Versions Huawei Smart Phones Moana-AL00B versions prior to 10.1.0.166 Description The issue is related to a missing initialization of resource vulnerability. An attacker can trick a user into installing and running a crafted application, which may caus...

5.5CVSS0.00469EPSS
SaveExploits0References3
Huawei
Huawei
•added 2020/07/15 12:00 a.m.•38 views

Security Advisory - Missing Initialization of Resource Vulnerability in Some Huawei SmartPhones

Missing Initialization of Resource Vulnerability in Some Huawei Smart Phones. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this vulnerability may cause device exceptions. Vulnerability...

5.5CVSS5.3AI score0.00469EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2020/07/14 11:15 p.m.•8 views

CVE-2020-1419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1389, CVE-2020-1426...

5.5CVSS6.4AI score0.01357EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/07/14 11:15 p.m.•7 views

CVE-2020-1389

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1419, CVE-2020-1426...

5.5CVSS6.4AI score0.01278EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/14 11:15 p.m.•24 views

Information disclosure

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1419, CVE-2020-1426...

2.1CVSS4.9AI score0.01357EPSS
SaveExploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
•added 2020/07/14 7:00 a.m.•27 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have t...

5.5CVSS2.7AI score0.01278EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2020/07/14 7:00 a.m.•31 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have t...

5.5CVSS2.7AI score0.01357EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/14 12:00 a.m.•6 views

CVE-2020-1389: Improper Initialization

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1419, CVE-2020-1426...

5.5CVSS5.8AI score0.01278EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2020/07/10 8:15 p.m.•27 views

UBUNTU-CVE-2020-11061

In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched...

7.4CVSS7AI score0.0124EPSS
SaveExploits0References4
Mageia
Mageia
•added 2020/07/10 8:01 a.m.•51 views

Updated coturn packages fix security vulnerability

The updated package fixes a security vulnerability: In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to...

7.5CVSS3AI score0.01898EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2020/07/07 11:43 a.m.•16 views

SUSE-SU-2019:3184-2 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Security issues fixed: - CVE-2019-17542: Fixed a heap-buffer overflow in vqadecodechunk due to an out-of-array access bsc1154064. - CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check bsc1137526. - CVE-2019-9718: Fixe...

9.8CVSS7.1AI score0.03058EPSS
SaveExploits0References9
osv_usn
osv_usn
•added 2020/07/06 7:29 p.m.•28 views

USN-4411-1 linux, linux-aws, inux-azure, linux-gcp, linux-kvm, linux-oracle, linux-raspi, linux-riscv vulnerabilities

It was discovered that the elf handling code in the Linux kernel did not initialize memory before using it in certain situations. A local attacker could use this to possibly expose sensitive information kernel memory. CVE-2020-10732 Matthew Sheets discovered that the SELinux network label handlin...

6.7CVSS6.3AI score0.05193EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2020/07/06 12:00 a.m.•78 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4413-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4413-1 advisory. Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer....

6.7CVSS6.4AI score0.05193EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2020/07/01 12:00 a.m.•45 views

coturn < 4.5.1.3 Information Disclosure Vulnerability

coturn is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.5CVSS7.3AI score0.01898EPSS
SaveExploits0References1
Rows per page
Query Builder