Design/Logic Flaw

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password...

CVE-2019-18828

Barco ClickShare Button R9861500D01 devices before firmware 1.9.0 have Insufficiently Protected Credentials: the embedded Linux root account used for access via debug interfaces (not enabled in production) relies on a weak password, enabling potential credential exposure. This CVE (CVE-2019-18828...

CVE-2019-18828

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password...

The vulnerability of the Kernel Mode module in the Intel Graphics Driver allows a hacker to disclose protected information.

The vulnerability of the Kernel Mode module in the Intel Graphics Driver lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the StartTileData.dll library in the Windows operating system is related to errors during the creation of files in protected directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application.

The vulnerability of the StartTileData.dll library in the Windows operating system is related to errors during the creation of files in protected directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created...

The vulnerability of the web interface of D-Link DAP-1320 A2 microprogramming software for wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of D-Link DAP-1320 A2 wireless router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the SS...

The vulnerability of the Management Page component of D-Link DIR-816 A1 wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Management Page component in the microprogramming software of D-Link DIR-816 A1 relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the implementation of backup and recovery operations for software that manages virtual infrastructure like VMware vCenter Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of backup and recovery operations for software that manages virtual infrastructure like VMware vCenter Server Appliance is related to deficiencies in verifying the authenticity of certificates. Exploiting this vulnerability can allow an attacker, operating...

DEBIAN-CVE-2019-5062

An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resulting in a denial...

The vulnerability of the Windows Error Reporting (WER) error reporting service in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Error Reporting WER error reporting service for Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created...

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a locked screen...

The vulnerability of VMnetDHCP hypervisors in VMware Workstation and VMware Fusion allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of VMnetDHCP hypervisors in VMware Workstation and VMware Fusion lies in the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Identity Services Engine ISE network policy management web interface is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by...

The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Google Chrome’s ServiceWorker component, which allows a hacker to disclose protected information

The vulnerability of Google Chrome’s ServiceWorker component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

The vulnerability of Blink’s rendering module in Google Chrome browsers allows attackers to circumvent the no-clicking policy and disclose the protected information.

The vulnerability of Blink’s rendering module in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the no-click policy and disclose protected information through a specially created HTML page...

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

The vulnerability of the Google Chrome browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a hacker to disclose the protected information...

The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...

The vulnerability of Google Chrome’s WebAudio component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebAudio component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...