8056 matches found
CVE-2020-2803: Undefined Security Weakness
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...
CVE-2020-2805
A flaw was found in the way the readObject method of the MethodType class in the Libraries component of OpenJDK checked argument types. This flaw allows an untrusted Java application or applet to bypass Java sandbox restrictions...
Vtiger-CRM-Vulnerabilities
Vtiger-CRM-Vulnerabilities Vtiger CRM v7.2.0 has Cross-Site Sc...
Low: Red Hat Security Advisory: elfutils security update
An update for elfutils is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
SUSE-SU-2020:0394-1 Security update for gcc9
This update for gcc9 fixes the following issues: The GNU Compiler Collection is shipped in version 9. A detailed changelog on what changed in GCC 9 is available at https://gcc.gnu.org/gcc-9/changes.html The compilers have been added to the SUSE Linux Enterprise Toolchain Module. To use these...
Description of the security update for PowerPoint 2010: April 14, 2020
Description of the security update for PowerPoint 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists if Microsoft Office incorrectly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilitie...
Description of the security update for Outlook 2013: April 14, 2020
Description of the security update for Outlook 2013: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office improperly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilities...
Description of the security update for Outlook 2010: April 14, 2020
Description of the security update for Outlook 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists if Microsoft Office incorrectly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilities a...
Description of the security update for Office 2013: April 14, 2020
Description of the security update for Office 2013: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists if Microsoft Office incorrectly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilities an...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the...
Tencent Computer Management has a dll hijacking vulnerability
Tencent PC Butler is a free security software from Tencent. Tencent Computer Manager has a dll hijacking vulnerability, which can be exploited by attackers to load untrustworthy dynamic link libraries for command execution...
Tencent's Allk Song suffers from DLL hijacking vulnerability
Tencent National K Song is a karaoke software produced by Tencent, with various functions such as intelligent scoring, professional mixing, friends ring, fun interaction and social sharing. Tencent All K Song has a DLL hijacking vulnerability that can be exploited to load untrusted dynamic link...
Cool Music is vulnerable to dll hijacking
Cool Music is an online digital music platform. A dll hijacking vulnerability exists in CoolMusic, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...
QQ is vulnerable to dll hijacking
QQ is an Internet-based instant messaging IM software. QQ suffers from a dll hijacking vulnerability, which can be exploited to load untrusted dynamic link libraries for command execution...
PT-2020-2047
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A remote code execution issue exists due to Microsoft Office improperly loading arbitrary type libraries. This allows an attacker to install programs, view, change, or delete data, o...
PT-2020-2537
Name of the Vulnerable Software and Affected Versions Java SE versions 7u251, 8u241, 11.0.6, and 14 Java SE Embedded version 8u241 Description The issue is related to insufficient access control in the Libraries component of Java SE and Java SE Embedded, allowing an unauthenticated attacker with...
Security Updates for Microsoft Word Products (April 2020)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data;...
Security Updates for Microsoft PowerPoint Products (April 2020)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or...
Security Updates for Microsoft Visio Products (April 2020)
The Microsoft Visio Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability. The vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data; or crea...
Security Updates for Microsoft Excel Products (April 2020)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...