Show filters
67 topics marked with the following tags:
Displaying 21-30 of 67
Sort by:
Attacker Value
Very Low
Intel CPU Memory Mapping Local Information Leak: 'Spoiler'
Disclosure Date: April 17, 2019 (last updated October 06, 2023)
Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosure via local access.
0
Attacker Value
Low
CVE-2021-39211
Disclosure Date: September 15, 2021 (last updated October 07, 2023)
GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server information. This issue is fixed in version 9.5.6. As a workaround, remove the file `ajax/telemetry.php`, which is not needed for usual functions of GLPI.
1
Attacker Value
Low
CVE-2022-32230
Last updated June 21, 2022
Windows SMB Denial of Service Vulnerability.
1
Attacker Value
Moderate
CVE-2019-19193
Disclosure Date: February 10, 2020 (last updated October 06, 2023)
The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict the advertisement connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.
0
Attacker Value
Very Low
CVE-2020-5308
Disclosure Date: January 07, 2020 (last updated November 15, 2023)
PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php.
0
Attacker Value
Low
CVE-2020-1015
Disclosure Date: April 15, 2020 (last updated October 06, 2023)
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
0
Attacker Value
Moderate
CVE-2019-16336
Disclosure Date: February 12, 2020 (last updated October 06, 2023)
The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame.
0
Attacker Value
Moderate
CVE-2019-19192
Disclosure Date: February 12, 2020 (last updated October 06, 2023)
The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets.
0
Attacker Value
Moderate
CVE-2019-17060
Disclosure Date: February 10, 2020 (last updated October 06, 2023)
The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame.
0
Attacker Value
Low
CVE-2020-0753
Disclosure Date: February 11, 2020 (last updated October 06, 2023)
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.
0
