171 matches found
Intel® Converged Security Management Engine (Intel® CSME) 11.x issue
Summary: In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine Intel® CSME, Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience. Description: In an effort to continuously improve...
Design/Logic Flaw
A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 138117...
AIX 7.2 TL 0 : aixbase (IJ02827)
https://vulners.com/cve/CVE-2018-1383 https://vulners.com/cve/CVE-2018-1383 A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. C Tenable Network Security, Inc. The...
Vulnerability impacts AIX and VIOS (CVE-2018-1383),Vulnerability impacts VIOS and VIOS (CVE-2018-1383)
IBM SECURITY ADVISORY First Issued: Thu Feb 8 13:49:23 CST 2018 |Updated: Tue Feb 13 11:05:56 CST 2018 |Update: CVE description was updated to provide additional detail. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/aixbaseadvisory.asc...
CVE-2017-16633
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
CVE-2017-16633
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
Information disclosure
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
CVE-2017-16633
Technical details about CVE-2017-16633 are not publicly available in the provided connected documents; no specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2017-16633
In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
Joomla! < 3.8.0 Information Disclosure Vulnerability
Joomla is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
CVE-2017-14595
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
Information disclosure
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
CVE-2017-14595
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
[20170901] - Core - Information Disclosure
A logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
[20171103] - Core - Information Disclosure
A logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...
CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
FireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability. This vulnerability allows a malicious actor to download and execute a Visual Basic script containing PowerShell commands when a user opens a document containing ...
nspr: arbitrary code execution
A logic bug in the handling of large allocations would allow exceptionally large allocations to be reported as successful, without actually allocating the requested memory. This may allow attackers to bypass security checks and obtain control of arbitrary memory...
FreeBSD Kernel SCTP Remote NULL Ptr Dereference DoS
No description provided by source. / FreeBSD kernel SCTP latest release remote NULL ptr dereference DoS by Shaun Colley [email protected], 2 Aug 2012 The SCTP implementation used by FreeBSD reference implementation is vulnerable to a remote NULL pointer dereference in kernel due to a logic bug...
FreeBSD SCTP空指针引用远程拒绝服务漏洞
BUGTRAQ ID: 54797 FreeBSD是一种UNIX操作系统,是由经过BSD、386BSD和4.4BSD发展而来的Unix的一个重要分支。 FreeBSD在实现上存在SCTP协议相关的远程拒绝服务漏洞,攻击者可利用此漏洞造成内核崩溃。 0 FreeBSD 9.x FreeBSD 8.x 厂商补丁: FreeBSD ------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.freebsd.org/security/index.html / FreeBSD kernel SCTP latest relea...
FreeBSD - SCTP Remote NULL Ptr Dereference Denial of Service
/ FreeBSD kernel SCTP latest release remote NULL ptr dereference DoS by Shaun Colley , 2 Aug 2012 The SCTP implementation used by FreeBSD "reference implementation" is vulnerable to a remote NULL pointer dereference in kernel due to a logic bug. When parsing ASCONF chunks, an attempt is made to...