Ubuntu 16.04 ESM : FFmpeg vulnerabilities (USN-5167-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5167-1 advisory. It was discovered that FFmpeg did not properly verify certain input when processing video and audio files. An attacker could possibly use this to send...

Atlassian Confluence Server DoS

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in access management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Android onCreate Privilege Escalation

The vulnerability of the onCreate method in Android operating systems is related to state management errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

glibc Resource Management Error Vulnerability

glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A resource management error vulnerability exists in glibc, which stems from the fact that the gaihinet function may use freed memory, causing the application to crash...

SEL-5037 SEL Grid Configurator RCE

The vulnerability of the SEL-5037 SEL Grid Configurator software in terms of creating, managing, and deploying energy systems is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with administrative privileges...

MinIO PostPolicyBucket Code Execution

The vulnerability of the PostPolicyBucket component of the MinIO storage server is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted HTTP requests...

Windows HTML Platform Bypass

The vulnerability of the Windows HTML Platform component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

System Settings Component Data Compromise

The vulnerability of the System Settings component in iOS, iPadOS, watchOS, tvOS, and macOS is related to state management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

CVE-2023-35871

The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KRNL64UC 7.53, HDB 2.00, XSADVANCEDRUNTIME 1.00,...

Windows GDI Privilege Escalation

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2023-36712

Уязвимость функции hisi pcie pmu offline cpu модуля drivers/perf/hisilicon/hisi pcie pmu.c драйвера мониторинга производительности ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Siemens SISCO MMS-EASE Third Party Component Resource Management Errors (CVE-2015-6574)

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Windows Backup Service Exploitation

The vulnerability of the Windows Backup Service in operating systems involves errors related to privilege management. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Illumina Universal Copy Service Disclosure Privilege Escalation

The vulnerability of microprogrammed medical devices with the Illumina Universal Copy Service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to disclose protected information, upload and execute code with elevated privileges...

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-25117)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited to execute arbitrary code in the context of the current process...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited by attackers to execute code in the current process...