Lucene search
K

1351 matches found

Prion
Prion
added 2020/06/18 3:15 a.m.14 views

Memory corruption

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

2.1CVSS5.5AI score0.00351EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/06/18 2:16 a.m.8 views

CVE-2020-3347 Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

5.5CVSS6.6AI score0.00351EPSS
Exploits0References1
CVE
CVE
added 2020/06/18 2:16 a.m.950 views

CVE-2020-3347

CVE-2020-3347 affects Cisco Webex Meetings Desktop App for Windows. The flaw stems from unsafe usage of shared memory in the Webex memory map/trace implementation, allowing an authenticated, local attacker to read sensitive data (e.g., usernames, meeting information, authentication tokens) from s...

5.5CVSS5.4AI score0.00351EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/06/18 12:0 a.m.2 views

Cisco Webex Meetings Desktop App Information Disclosure Vulnerability

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An information disclosure vulnerability exists in Cisco Webex Meetings Desktop App prior to version 40.6.0 for Windows-based platforms, which stems from the program failing...

5.5CVSS6AI score0.00351EPSS
Exploits0References1
Cisco
Cisco
added 2020/06/17 4:0 p.m.39 views

Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

5.5CVSS0.3AI score0.00351EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/04/30 12:0 a.m.53 views

Debian DSA-4667-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak. - CVE-2020-2732 Paulo Bonzini discovered that the KVM implementation for Intel processors did not properly handle instruction emulation for L2 guests...

7.1CVSS6.6AI score0.00962EPSS
Exploits2References13
RedhatCVE
RedhatCVE
added 2020/04/09 1:9 p.m.50 views

CVE-2019-5489

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...

7.1CVSS2.7AI score0.00774EPSS
Exploits1References2
OSV
OSV
added 2020/04/08 6:15 p.m.1 views

CVE-2018-21052

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...

9.8CVSS6AI score
Exploits0References1
Prion
Prion
added 2020/04/08 6:15 p.m.19 views

Input validation

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...

10CVSS9.7AI score0.00831EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/08 5:43 p.m.24 views

CVE-2018-21052

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...

9.8AI score0.00831EPSS
Exploits0References1
NVD
NVD
added 2020/04/07 2:15 p.m.23 views

CVE-2016-11038

An issue was discovered on Samsung mobile devices with software through 2016-04-05 incorporating the Samsung Professional Audio SDK. The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is...

9.8CVSS9.9AI score0.00887EPSS
Exploits0References1
Prion
Prion
added 2020/04/07 2:15 p.m.17 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with software through 2016-04-05 incorporating the Samsung Professional Audio SDK. The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is...

7.5CVSS8.3AI score0.00887EPSS
Exploits0References1
NVD
NVD
added 2020/03/02 5:15 a.m.12 views

CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 73 and Firefox ESR68.5...

8.8CVSS8.3AI score0.01552EPSS
Exploits0References5
Prion
Prion
added 2020/03/02 5:15 a.m.15 views

Memory corruption

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 73 and Firefox ESR68.5...

6.8CVSS8.2AI score0.01552EPSS
Exploits0References5Affected Software2
Cvelist
Cvelist
added 2020/03/02 4:5 a.m.17 views

CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 73 and Firefox ESR68.5...

8.4AI score0.01552EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2020/03/02 4:5 a.m.20 views

CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 73 and Firefox ESR68.5...

8.8CVSS9.8AI score0.01552EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2020/03/02 4:5 a.m.43 views

CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 73 and Firefox ESR68.5...

8.8CVSS8.5AI score0.01552EPSS
Exploits0
CNVD
CNVD
added 2020/02/25 12:0 a.m.2 views

Memory Corruption Vulnerability in HollySys HT8001 at Beijing HollySys Automation Drive Technology Co.

Beijing HOLLIS Automation Drive Technology Co., Ltd. is China's leading automation and information technology solutions provider HT8001CN configuration software is the company's HT series of touch-screen configuration screen development system, is an integrated development environment, has a very...

6.9AI score
Exploits0
0day.today
0day.today
added 2020/02/19 12:0 a.m.163 views

Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak Exploit

Exploit for hardware platform in category web applications Exploit Title: Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak Author: byteGoblin Vendor: https://www.nanometrics.ca Product: https://www.nanometrics.ca/products/accelerometers/titan-sma Product:...

7.1AI score0.74881EPSS
Exploits16
RedHat Linux
RedHat Linux
added 2020/02/18 3:55 p.m.2 views

Mozilla: Missing bounds check on shared memory read in the parent process

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 73 and Firefox ESR68.5...

8.8CVSS7.4AI score0.01552EPSS
Exploits0References5
Rows per page
Query Builder