CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

Windows iSCSI Target Privilege Escalation

The vulnerability of the Windows iSCSI Target service in the Windows operating system is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Virtual COM Port Driver Privilege Escalation

The vulnerability of the Virtual COM Port Driver VSPD of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to...

Windows Storage Services Privilege Escalation

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Language Pack Installer Privilege Escalation

The vulnerability of the Windows Language Pack Installer component in Windows operating systems is related to file operation errors. Exploiting this vulnerability can allow an attacker to execute processes in privileged mode using a specially created application...

Windows Storage Services Privilege Escalation

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Connected User Experiences and Telemetry Services Unauthorized Access

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

PT-2020-3160

Name of the Vulnerable Software and Affected Versions Windows Storage Services affected versions not specified Description The issue is related to errors in handling file operations, which can allow an attacker to elevate their privileges. This can impact the system, potentially allowing attacker...

IIS Privilege Escalation

The vulnerability of the Microsoft Internet Information Server IIS server, due to the Windows Background Intelligent Transfer Service BITS, affects operating systems running on Windows. This vulnerability is related to file operation processing errors. Exploiting this vulnerability can allow an...

PT-2020-2277

Name of the Vulnerable Software and Affected Versions Windows System Assessment Tool WinSAT affected versions not specified Description The issue is related to errors in file operation processing. It may allow an attacker to elevate their privileges using a specially crafted application. The...

Provisioning Runtime Privilege Escalation

The vulnerability of the Provisioning Runtime component in Windows operating systems is related to errors in file operation handling. Exploiting this vulnerability can allow an attacker to gain increased privileges by executing non-privileged code on the target system...

Windows device installation dispatcher Privilege Escalation

The vulnerability of the Windows device management agent is related to errors in file operations. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges using a specially created application...

GitLab Information Disclosure Vulnerability (CNVD-2020-12723)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

HP Inkjet printers information disclosure vulnerability

HP Inkjet printers are an Inkjet series of printers from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Inkjet printers. The vulnerability arises from errors in the configuration of the networked system or in the operation of the product. The vulnerability can be...

Dnsmasq Information Disclosure Vulnerability (CNVD-2019-39404)

Dnsmasq is a lightweight, easy-to-configure DNS forwarder and DHCP server. An information disclosure vulnerability exists in Dnsmasq, which arises from errors in configuration and other errors in the operation of a network system or product, and can be exploited by an unauthorized attacker to...

Linux kernel information disclosure vulnerability (CNVD-2019-38262)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in versions of Linux kernel prior to 4.18.7. The vulnerability stems from errors in configuration and other errors in th...

Storage Service Privilege Escalation

The vulnerability of the Storage Service component in Windows operating systems is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to increase their privileges...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2020-17612)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which arises from erro...