2726 matches found
Design/Logic Flaw
A vulnerability exists in HCView aka Hardcoreview 1.4 due to a write access violation with a GIF file...
CVE-2012-6306
A vulnerability exists in HCView aka Hardcoreview 1.4 due to a write access violation with a GIF file...
CVE-2012-6306
CVE-2012-6306 affects HCView (aka Hardcoreview) 1.4. The vulnerability is caused by a write access violation triggered by a GIF file. Concrete details specified in connected documents identify the affected product and the root cause as a GIF-processing write violation, but no remediation or explo...
CVE-2013-5659
Wiz 5.0.3 has a user mode write access violation...
CVE-2013-5659
CVE-2013-5659 affects Wiz version 5.0.3 and is described as a user mode write access violation. Connected sources corroborate Wiz 5.0.3 as vulnerable; no details on root cause, affected components, or patches are provided in the documents. CVSS v3.1 base score is 7.5 (HIGH) with network attack ve...
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-1217)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2019-2639)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2017-1321)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-20384
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners...
CVE-2020-2547
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromi...
Android - ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN
Android - ashmem Readonly Bypasses via remapfilepages and ASHMEMUNPIN This bug report describes two ways in which an attacker can modify the contents of a read-only ashmem fd. I'm not sure at this point what the most interesting user of ashmem is in the current Android release, but there are...
Red Hat Quay Bot Account Plain Text Token Vulnerability
Red Hat Quay is a private container registry for storing, building, and deploying container images. A bot account plain text token vulnerability exists in Red Hat Quay versions prior to 3.2.0. An attacker could exploit this vulnerability to perform read and write operations on container images...
PT-2019-16009 · Exim +1 · Sa-Exim +1
Name of the Vulnerable Software and Affected Versions: sa-exim version 4.2.1 Description: The issue allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than direct parsing and/or use of the taint feature...
Xen Project Restartable PV Type Change Operations Elevation of Privilege Vulnerability (XSA-310)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an elevation of privilege vulnerability due to race conditions in the pagetable promotion and demotion operations. An authenticated, remote attacker can exploit this issue, by triggering...
CVE-2019-2274
CVE-2019-2274 describes an Improper Access Control issue for RPU write access from the secure processor in Qualcomm-supplied Snapdragon platforms (Auto, Compute, CE Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wired Infrastructure/Networking). Affected families include APQ80...
EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2019-2639)
According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an...
CVE-2019-19814
In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...
CVE-2019-19814
In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...
CVE-2019-19816
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in btrfsmapblock in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled...