Input validation

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and writ...

CVE-2016-8764

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and writ...

The vulnerability of the Internet Explorer browser, which allows a violator to obtain confidential information

The vulnerability of the VBS script execution mechanism in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a specially crafted...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-03537)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to obtain sensitive information in process memo...

The vulnerability of the iOS operating system, the multimedia player iTunes, and the web browser Safari allows a perpetrator to obtain confidential information from the process’s memory.

The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the browser Safari is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from...

The vulnerability of the shared memory manager of the sshd daemon used in OpenSSH encryption protection allows a hacker to increase their privileges.

The vulnerability of the manager of shared memory in the sshd daemon of the OpenSSH cryptographic protection mechanism arises from the execution of an operation beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges by...

Multiple Huawei VRP Platform Switch Input Checksum Vulnerabilities

Huawei S12700, S5700, S7700, S9700 are switching devices from Huawei China. An input checksum vulnerability exists in multiple Huawei VRP platform switches. Due to the lack of input checksum, an attacker can exploit the vulnerability to construct malformed messages to be sent to the VRP, causing...

Security Advisory - Input Validation Vulnerability in Huawei VRP Platform

There is an input validation vulnerability in some Huawei devices using VRP. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using VRP, causing the device to display additional memory data and possibly leading to sensitive information leakag...

CVE-2016-4658

A use-after-free flaw was found in the Xpointer implementation of libxml2. An attacker could use this flaw against an application parsing untrusted XML files and compiled with libxml2 to leak small amount of memory data. Mitigation Mitigation for this issue is either not available or the currentl...

Kaspersky Internet Security Denial of Service Vulnerability

Kaspersky Internet Security KIS, Kaspersky Security Software is a set of security software developed by Russia's Kaspersky Lab Kaspersky Lab with both antivirus and firewall functions. There are security vulnerabilities in KIS. A local attacker can exploit this vulnerability with a specially...

The vulnerability of the Flash Player software allows a perpetrator to obtain confidential information from the process’s memory.

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory...

The vulnerability of the SolarWinds Virtualization Manager software allows a hacker to execute arbitrary commands.

The vulnerability of the RMI component of the SolarWinds Virtualization Manager relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely, using a specially crafted serialized Java object...

PT-2016-2391 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 18.0.0.366 Adobe Flash Player versions 19.x through 22.x before 22.0.0.209 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.632 on Linux Description: The issue is related to the lack of...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servic...

Siemens SIPROTEC 4 and SIPROTEC Information Disclosure Vulnerability (CNVD-2016-03386)

Siemens SIPROTEC 4 is a series of multifunctional relays; SIPROTEC Compact is a microcomputer protection device. An information disclosure vulnerability exists in the integrated web server of the SIPROTEC 4 and SIPROTEC Compact. A remote attacker with network access could exploit this vulnerabili...

Samba Information Disclosure Vulnerability

Samba is a set of programs that implement the SMB Server Messages Block protocol, cross-platform file sharing and print sharing services. An information disclosure vulnerability exists in Samba versions 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3. Due to the length of the error...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-07555)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. An information disclosure vulnerability exists in Microsoft Internet Explorer 9 through 11. The vulnerability allows remote attackers to obtain sensitive information from...

Linux kernel local information disclosure vulnerability (CNVD-2015-07402)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to exploit the vulnerability to gain access to sensitive memory information...