PT-2021-9440

Name of the Vulnerable Software and Affected Versions Max Secure Max Spyware Detector version 1.0.0.044 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019 in the driver fi...

f2fs-tools: Multiple vulnerabilities

Background Tools for Flash-Friendly File System F2FS. Description Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

glibc: Multiple vulnerabilities

Background glibc is a package that contains the GNU C library. Description Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workarou...

CVE-2021-2000

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYS Account privilege with network access via Oracle Net to compromise Unified...

Code injection

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYS Account privilege with network access via Oracle Net to compromise Unified...

CVE-2021-2000: Undefined Security Weakness

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYS Account privilege with network access via Oracle Net to compromise Unified...

PT-2021-1903

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description The issue is related to the Unified Audit component of Oracle Database Server, which is affected by a vulnerability related to insufficient access control. This...

CVE-2020-28841

MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \.\MyDrivers001...

CVE-2020-28841

MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \.\MyDrivers001...

Command injection

MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \.\MyDrivers001...

CVE-2020-28841

MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \.\MyDrivers001...

CVE-2020-28841

The CVE-2020-28841 entry concerns MyDrivers64.sys in DriverGenius (version 9.61.3708.3054). The vulnerability is triggered by the ioctl command 0x9c402000 to the device path \.\u MyDrivers0_0_1, causing a system crash. Documented impact is a denial of service via local access, with no explicit fi...

Cmcm Drivergenius Buffer Error Vulnerability

Cmcm Drivergenius Driver Genius is a software for Windows system to solve the driver adaptation update and download from the Chinese company Beijing Cheetah Mobile Technology Co Ltd Cmcm. DriverGenius 9.61.3708.3054 MyDrivers64.sys suffers from a buffer error vulnerability that can be exploited b...

CVE-2020-28841: Undefined Security Weakness

MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \.\MyDrivers001...

PT-2021-11582

Name of the Vulnerable Software and Affected Versions: DriverGenius version 9.61.3708.3054 Description: The issue allows attackers to cause a system crash via the ioctl command 0x9c402000 to the API endpoint ".MyDrivers0 0 1". Recommendations: For DriverGenius version 9.61.3708.3054, consider...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...

The vulnerability of the kernel driver sncc0.sys of the Secret Net security system and Secret Net Studio, related to privilege management errors, allows attackers to bypass the Randomization of the Operating System’s Kernel Address Space (ASLR) mechanism.

The vulnerability of the kernel driver sncc0.sys in the Secret Net and Secret Net Studio security solutions is related to privilege management errors. Exploiting this vulnerability allows an attacker to bypass the Randomization of the Operating System’s Kernel Address Space ASLR mechanism and...

CVE-2020-28921

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers MSRs. This could lead to arbitrary Ring-0 code execution and escalation of...

CVE-2020-28921: Undefined Security Weakness

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers MSRs. This could lead to arbitrary Ring-0 code execution and escalation of...

PT-2020-17054

Name of the Vulnerable Software and Affected Versions Devid Espenschied PC Analyser versions through 4.10 Description An issue was discovered in the PCADRVX64.SYS kernel driver, which exposes IOCTL functionality. This allows low-privilege users to read and write to arbitrary Model Specific...