Lucene search
K

958 matches found

CNVD
CNVD
added 2018/11/16 12:0 a.m.2 views

Microsoft Windows MSRPC Information Disclosure Vulnerability

Microsoft Windows Server 2019 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Server 2019 is a set of operating systems used for servers.Windows 10 is a set of operating systems used for personal computers. An information disclosure...

5.5CVSS6.9AI score0.01757EPSS
Exploits0References1
NVD
NVD
added 2018/11/14 1:29 a.m.20 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

5.5CVSS6.5AI score0.01757EPSS
Exploits0References3
OSV
OSV
added 2018/11/14 1:29 a.m.2 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

5.5CVSS7.3AI score0.01757EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2018/11/14 1:29 a.m.0 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

5.5CVSS5.5AI score0.01757EPSS
Exploits0References4
Prion
Prion
added 2018/11/14 1:29 a.m.17 views

Information disclosure

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

2.1CVSS6AI score0.01757EPSS
Exploits0References3Affected Software5
Microsoft CVE
Microsoft CVE
added 2018/11/13 8:0 a.m.25 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

5.5CVSS3.1AI score0.01757EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2018/10/31 12:0 a.m.37 views

Apple macOS sysctl_procargsx Uninitialized Buffer Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

4.7CVSS2.3AI score0.0035EPSS
Exploits0References1
OSV
OSV
added 2018/09/28 1:29 p.m.8 views

CVE-2018-17155

In FreeBSD before 11.2-STABLEr338983, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338984, and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls, small amounts of kernel memory may be disclosed to userland processes...

5.5CVSS6.2AI score
Exploits0References1
Cvelist
Cvelist
added 2018/09/28 1:0 p.m.13 views

CVE-2018-17155

In FreeBSD before 11.2-STABLEr338983, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338984, and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls, small amounts of kernel memory may be disclosed to userland processes...

5.4AI score0.00053EPSS
Exploits0References1
OSV
OSV
added 2018/09/13 12:29 a.m.1 views

CVE-2018-8419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

5.5CVSS7.3AI score0.00806EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2018/09/12 12:0 a.m.339 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3762-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3762-1 advisory. It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to...

5.5CVSS6.7AI score0.00108EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2018/09/11 7:0 a.m.36 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have t...

5.5CVSS2.7AI score0.00806EPSS
Exploits0
Ubuntu
Ubuntu
added 2018/09/11 2:6 a.m.135 views

USN-3762-1: Linux kernel vulnerabilities

It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to possibly expose sensitive information kernel memory. CVE-2018-1118 Seunghun Han discovered an information leak in the ACPI handling code in the...

5.5CVSS6.5AI score0.00108EPSS
Exploits0
OpenVAS
OpenVAS
added 2018/09/11 12:0 a.m.52 views

Ubuntu: Security Advisory (USN-3762-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.8AI score0.00108EPSS
Exploits0References2
OSV
OSV
added 2018/08/15 3:45 p.m.6 views

MGASA-2018-0341 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 4.14.62 and fixes at least the following security issues: kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled...

8CVSS7.9AI score0.24723EPSS
Exploits22References21
OSV
OSV
added 2018/08/06 5:26 p.m.9 views

SUSE-SU-2018:2222-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel-azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenari...

7.8CVSS8.6AI score0.9427EPSS
Exploits19References149
OSV
OSV
added 2018/07/25 8:24 a.m.8 views

MGASA-2018-0324 Updated kernel packages fixes security vulnerabilities

This kernel update is based on the upstream 4.14.56 and fixes at least the following security issues: kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptio...

8CVSS7.3AI score0.24723EPSS
Exploits21References10
Zero Day Initiative
Zero Day Initiative
added 2018/07/18 12:0 a.m.29 views

Oracle VirtualBox SHCRGL_GUEST_FN_WRITE_READ_BUFFERED Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

4.7CVSS3.7AI score0.00246EPSS
Exploits0References1
OSV
OSV
added 2018/06/14 12:29 p.m.1 views

CVE-2018-8121

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207...

4.7CVSS5.8AI score0.00712EPSS
Exploits0References3
NVD
NVD
added 2018/05/17 3:29 p.m.16 views

CVE-2018-1174

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.2AI score0.0019EPSS
Exploits0References2
Rows per page
Query Builder