Lucene search
+L

13148 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.21 views

The vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.1AI score0.0149EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.9 views

The vulnerability of Google Chrome’s browser, related to integer overflow, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and accessibility through a specially created HTML file...

9.3CVSS7AI score0.01539EPSS
SaveExploits0References11Affected Software5
OSV
OSV
added 2020/04/22 10:15 p.m.10 views

CVE-2020-8833

Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protectedsymlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash...

4.7CVSS5.8AI score0.00344EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/04/17 12:00 a.m.8 views

Memono Information Disclosure Vulnerability

Memono is a cross-platform multimedia note-taking application. A security vulnerability exists in Memono version 3.8. An attacker can exploit the vulnerability to read password-protected notes without a password...

7.5CVSS6.8AI score0.00514EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.13 views

The vulnerability of the Open Build Service software platform, related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Open Build Service software platform is related to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...

4.9CVSS6.7AI score0.01817EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.10 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.01225EPSS
SaveExploits0References11Affected Software14
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.13 views

The vulnerability of the aria2c download utility’s aria2 component, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the aria2c download utility’s aria2 component relates to the disclosure of information through registration files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.1AI score0.00351EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

7.1CVSS6.9AI score0.01304EPSS
SaveExploits0References12Affected Software15
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the RADIUS server FreeRADIUS, related to incorrect authentication, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RADIUS-server FreeRADIUS is related to incorrect authentication processes. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

10CVSS7.1AI score0.07624EPSS
SaveExploits0References7Affected Software5
NVD
NVD
added 2020/04/15 3:15 p.m.23 views

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

7.8CVSS7.7AI score0.01035EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.9 views

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

7.8CVSS7.1AI score0.01035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.41 views

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

8.1AI score0.01035EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.29 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally...

7.8CVSS3AI score0.01035EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.8 views

The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system’s kernel PowerPC microprocessor architecture exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility ...

4.4CVSS6.4AI score0.00451EPSS
SaveExploits1References26Affected Software12
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:00 a.m.11 views

The vulnerability of the web interface of Siemens SINEMA Remote Connect allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Siemens SINEMA Remote Connect web interface is related to the lack of measures taken to encrypt sensitive data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

4CVSS5.4AI score0.00552EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:00 a.m.9 views

The vulnerability of the mod_auth_digest component in the Apache HTTP Server allows a hacker to gain unauthorized access to confidential information or execute arbitrary code.

The vulnerability of the modauthdigest component in the Apache HTTP Server is related to insufficient protection of web pages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or execute arbitrary code...

6.1CVSS6.8AI score0.01535EPSS
SaveExploits0References5Affected Software4
Microsoft KB
Microsoft KB
added 2020/04/09 12:00 a.m.10 views

Protected content playback errors on Windows 8 or Windows Server 2012 after you install KB 2756872

Protected content playback errors on Windows 8 or Windows Server 2012 after you install KB 2756872 Symptoms Consider the following scenario: You have a computer that is running Windows 8 or Windows Server 2012. You install the update in the following Microsoft Knowledge Base article: 2756872...

6.4AI score
SaveExploits0
OSV
OSV
added 2020/04/07 4:15 p.m.8 views

CVE-2017-18687

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 January 2017...

5.3CVSS5.8AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/07 4:15 p.m.22 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 January 2017...

5CVSS5.4AI score0.0034EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:00 a.m.12 views

The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

6.8CVSS6.7AI score0.04338EPSS
SaveExploits2References9Affected Software4
Rows per page
Query Builder