CWE-459 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-459/ Sun, 26 Feb 2023 06:48:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-459 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-459/ 32 32 CVE-2018-19961 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19961/ Sun, 26 Feb 2023 06:48:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19961/ An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.

The post CVE-2018-19961 appeared first on CVE Vulnerability.

]]> An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.

The post CVE-2018-19961 appeared first on CVE Vulnerability.

]]> CVE-2018-18924 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18924/ Sun, 26 Feb 2023 06:47:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18924/ The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with “#exec cmd” because rejected files remain on the server, with predictable filenames, after a “This file is not a valid image” error message.

The post CVE-2018-18924 appeared first on CVE Vulnerability.

]]> The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with “#exec cmd” because rejected files remain on the server, with predictable filenames, after a “This file is not a valid image” error message.

The post CVE-2018-18924 appeared first on CVE Vulnerability.

]]> CVE-2018-18281 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18281/ Sun, 26 Feb 2023 06:47:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18281/ Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it […]

The post CVE-2018-18281 appeared first on CVE Vulnerability.

]]> Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.

The post CVE-2018-18281 appeared first on CVE Vulnerability.

]]> CVE-2018-17467 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17467/ Sun, 26 Feb 2023 06:47:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17467/ Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

The post CVE-2018-17467 appeared first on CVE Vulnerability.

]]> Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

The post CVE-2018-17467 appeared first on CVE Vulnerability.

]]> CVE-2018-15407 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15407/ Sun, 26 Feb 2023 06:46:38 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15407/ A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect […]

The post CVE-2018-15407 appeared first on CVE Vulnerability.

]]> A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system.

The post CVE-2018-15407 appeared first on CVE Vulnerability.

]]> CVE-2018-12332 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-12332/ Sun, 26 Feb 2023 06:45:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-12332/ Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset.

The post CVE-2018-12332 appeared first on CVE Vulnerability.

]]> Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset.

The post CVE-2018-12332 appeared first on CVE Vulnerability.

]]> CVE-2018-11068 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11068/ Sun, 26 Feb 2023 06:45:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11068/ RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material.

The post CVE-2018-11068 appeared first on CVE Vulnerability.

]]> RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material.

The post CVE-2018-11068 appeared first on CVE Vulnerability.

]]> CVE-2020-6794 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6794/ Sun, 26 Feb 2023 06:42:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6794/ If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master password is added only […]

The post CVE-2020-6794 appeared first on CVE Vulnerability.

]]> If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Thunderbird < 68.5.

The post CVE-2020-6794 appeared first on CVE Vulnerability.

]]> CVE-2020-5987 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5987/ Sun, 26 Feb 2023 06:42:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5987/ NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or escalation of privileges. This affects vGPU […]

The post CVE-2020-5987 appeared first on CVE Vulnerability.

]]> NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or escalation of privileges. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

The post CVE-2020-5987 appeared first on CVE Vulnerability.

]]> CVE-2020-5961 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5961/ Sun, 26 Feb 2023 06:42:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5961/ NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service.

The post CVE-2020-5961 appeared first on CVE Vulnerability.

]]> NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service.

The post CVE-2020-5961 appeared first on CVE Vulnerability.

]]>