13148 matches found
The vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.
The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Google Chrome’s browser, related to integer overflow, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.
The vulnerability of Google Chrome relates to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and accessibility through a specially created HTML file...
CVE-2020-8833
Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protectedsymlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash...
Memono Information Disclosure Vulnerability
Memono is a cross-platform multimedia note-taking application. A security vulnerability exists in Memono version 3.8. An attacker can exploit the vulnerability to read password-protected notes without a password...
The vulnerability of the Open Build Service software platform, related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Open Build Service software platform is related to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...
The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the aria2c download utility’s aria2 component, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the aria2c download utility’s aria2 component relates to the disclosure of information through registration files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the RADIUS server FreeRADIUS, related to incorrect authentication, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the RADIUS-server FreeRADIUS is related to incorrect authentication processes. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2020-1009
An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...
CVE-2020-1009
An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...
CVE-2020-1009
An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally...
The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system’s kernel PowerPC microprocessor architecture exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility ...
The vulnerability of the web interface of Siemens SINEMA Remote Connect allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Siemens SINEMA Remote Connect web interface is related to the lack of measures taken to encrypt sensitive data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the mod_auth_digest component in the Apache HTTP Server allows a hacker to gain unauthorized access to confidential information or execute arbitrary code.
The vulnerability of the modauthdigest component in the Apache HTTP Server is related to insufficient protection of web pages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or execute arbitrary code...
Protected content playback errors on Windows 8 or Windows Server 2012 after you install KB 2756872
Protected content playback errors on Windows 8 or Windows Server 2012 after you install KB 2756872 Symptoms Consider the following scenario: You have a computer that is running Windows 8 or Windows Server 2012. You install the update in the following Microsoft Knowledge Base article: 2756872...
CVE-2017-18687
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 January 2017...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 January 2017...
The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.
The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...