Lucene search
+L

13156 matches found

OSV
OSV
added 2019/11/13 9:15 a.m.10 views

CVE-2019-3648

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...

6.7CVSS6.9AI score0.00661EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2019/11/12 11:04 p.m.5 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:47 p.m.4 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:46 p.m.7 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:35 p.m.6 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:29 p.m.3 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:27 p.m.7 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:22 p.m.5 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/11/12 10:13 p.m.5 views

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

4.4CVSS6.5AI score0.00415EPSS
SaveExploits0References6
NVD
NVD
added 2019/11/12 7:15 p.m.39 views

CVE-2019-1423

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1422...

7.8CVSS7.7AI score0.01429EPSS
SaveExploits0References2
OSV
OSV
added 2019/11/12 7:15 p.m.11 views

CVE-2019-1423

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1422...

7.8CVSS7.1AI score0.01429EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2019/11/12 6:37 p.m.30 views

CVE-2019-0117

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory. Mitigation As of this time...

6CVSS4.6AI score0.00415EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:00 a.m.58 views

Microsoft Office ClickToRun Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM. To exploit this bug, an attacker would...

10CVSS2.1AI score0.0681EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:00 a.m.38 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

7.8CVSS3AI score0.01429EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.7 views

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usin...

6.1CVSS6.4AI score0.03139EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.13 views

The vulnerability of the Siebel UI Framework component of the Oracle Siebel CRM system allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Siebel UI Framework component of the Oracle Siebel CRM system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

5.3CVSS6.6AI score0.01553EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.12 views

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to remotely gain access, enabling them to modify, add, or delete...

6.8CVSS6.9AI score0.01341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

5CVSS6.9AI score0.01129EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

The vulnerability of the OAM component in Oracle JDeveloper and ADF allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAM component in Oracle JDeveloper and ADF is related to lack of access control. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

3.5CVSS5.8AI score0.00882EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.12 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to disclose protected information.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

5CVSS6.8AI score0.01129EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder