CVE-2020-27715: Undefined Security Weakness

On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cause high 100% CPU utilization by the httpd daemon...

PT-2020-16777

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.1.0 through 14.1.3 F5 BIG-IP versions 15.1.0 through 15.1.0.5 Description A crafted TLS request to the BIG-IP management interface via port 443 can cause high 100% CPU utilization by the httpd daemon. Recommendations For ...

Junos DoS

The vulnerability of the Multiservices PIC Management Daemon mspmand implementation in the Junos operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to initiate an extended denial-of-service attack from a...

Junos jdhcpd Emergency Shutdown

The vulnerability of the jdhcpd daemon in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an emergency shutdown of the application using a specially crafted DHCPv6 packet...

Cross site request forgery (csrf)

MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service daemon crash via a long name for the first parameter in a POST request...

CVE-2020-29596

CVE-2020-29596 affects MiniWeb HTTP server 0.8.19. The vulnerability lets remote attackers cause a denial of service (daemon crash) by sending a long name for the first parameter in a POST request. Public references (e.g., Exploit-DB, Packet Storm) exist; technical details in the updated document...

lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c

A buffer overflow was found in the lldpdecode function in daemon/protocols/lldp.c in lldpd. This flaw allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries. This threatens the...

CVE-2020-29596: Buffer Copy without Checking Size of Input

MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service daemon crash via a long name for the first parameter in a POST request...

PT-2020-17210

Name of the Vulnerable Software and Affected Versions MiniWeb HTTP server version 0.8.19 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a POST request with a long name for the first parameter. Recommendations For MiniWeb HTTP...

CVE-2020-35552

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

Design/Logic Flaw

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

CVE-2020-35552

CVE-2020-35552 involves the GPS daemon on Samsung mobile devices with non-Qualcomm chipsets (O 8.x, P 9.0, Q 10.0). The vulnerability arises from an incorrect configuration file in the GPS service, allowing an attacker to obtain sensitive location information. Connected records confirm the affect...

CVE-2020-35552

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

CVE-2020-35552: Undefined Security Weakness

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

PT-2020-17345

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x through Q10.0 non-Qualcomm chipsets Description An issue in the GPS daemon allows attackers to obtain sensitive location information due to an incorrect configuration file. Recommendations For Samsung mobile...

lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c

A buffer overflow was found in the lldpdecode function in daemon/protocols/lldp.c in lldpd. This flaw allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries. This threatens the...

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2546)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Local symlink attack in Unbound and NSD

...

CVE-2020-16128

The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5...