The vulnerability of the Intel Graphics Driver’s API driver component allows a hacker to disclose protected information.

The vulnerability of the Intel Graphics Driver’s API driver component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose protected information...

Samba Authorization Issues Vulnerability

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. An authorization issue...

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a locked screen...

The vulnerability of the Omnibox component in the Google Chrome browser allows attackers to perform spoofing attacks.

The vulnerability of the Omnibox component in Google Chrome relates to deficiencies in the mechanism for verifying digital signatures. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created domain name...

The vulnerability of the URL Formatter component in Google Chrome allows a hacker to replace the content of the Omnibox component (URL).

The vulnerability of the URL Formatter component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of the Omnibox component URL through a specially created domain name...

Unspecified vulnerability in ShapeShift KeepKey finite state machine

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. An unspecified vulnerability exists in the ShapeShift KeepKey finite state machine, which stems from the program not being sufficiently authenticated. The vulnerability can be exploited to reset a portion of the encryption key t...

The vulnerability of Google Chrome browser, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created HTML page...

Multiple Huawei products encryption issues vulnerabilities

The Huawei S12700, among others, is an enterprise switch product from Huawei, a Chinese company. An encryption vulnerability exists in several Huawei products. The vulnerability stems from a weak encryption algorithm used by the product by default, which can be exploited by an attacker to disclos...

Kernel: page cache side channel attacks

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...

The vulnerability of the Firefox browser’s API component, which allows a hacker to replace the user interface

The vulnerability of the Firefox browser’s API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface using a specially crafted title parameter...

CVE-2019-5227

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R2P1, versions earlier than Hima-AL00B 9.1.0.135C00E133R2P1 and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade...

CVE-2016-4980

A password generation weakness exists in xquest through 2016-06-13...

CVE-2016-4980

A password generation weakness exists in xquest through 2016-06-13...

CVE-2016-4980

A password generation weakness exists in xquest through 2016-06-13...

PT-2019-7829 · Xquest · Xquest

Name of the Vulnerable Software and Affected Versions: xquest versions prior to 2016-06-13 Description: A password generation weakness exists. Recommendations: For versions prior to 2016-06-13, at the moment, there is no information about a newer version that contains a fix for this issue...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-47028)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in the app/fax/faxfiles.php file in FusionPBX...

Kernel: page cache side channel attacks

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...

UBUNTU-CVE-2019-13704

Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page...

The vulnerability of the jQuery.extend function (true, {}, …) in the jQuery library allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the jQuery.extend function exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Moodle cross-site scripting vulnerability (CNVD-2019-43885)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle, which stems from the lack of proper validation of client-side data in the WEB...