CVE-2021-1404

CVE-2021-1404 affects ClamAV’s PDF parsing (versions 0.103.0 and 0.103.1). The issue is a heap buffer over-read caused by improper buffer size tracking, triggered by processing a crafted PDF, which can crash the ClamAV scanning process and cause a denial of service. Connected sources confirm this...

CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

CVE-2020-1404

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413, CVE-2020-1414,...

CVE-2020-1404

CVE-2020-1404 describes a Windows Runtime elevation of privilege vulnerability where memory objects are not handled safely, enabling local privilege escalation. The provided documents do not specify affected products/versions, root cause details beyond memory-management issue, exploit information...

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

RHEL 8 : firefox (RHSA-2020:1404)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1404 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2019-1404

...

ICSA-19-253-03_Siemens Industrial Products (Update P)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...

Rockwell Automation PM3000 M5 w/EtherNetIP,Class 0.2 1404-M5xxx-ENT-02 B

Binary data 753885.prm...

Rockwell Automation PM3000 M8 w/EtherNetIP,Class 0.2 1404-M8xxx-ENT-02 B

Binary data 753893.prm...

Rockwell Automation PM3000 M8 w/ControlNet, Class 0.2 1404-M8xxx-CNT-02

Binary data 753895.prm...

Rockwell Automation Powermonitor 3000 1404-M405A-DNT

Binary data 753800.prm...

Rockwell Automation PM3000 M6 w/ControlNet, Class 0.5 1404-M6xxx-CNT

Binary data 753890.prm...

Rockwell Automation PM3000 M8 w/EtherNetIP,Class 0.5 1404-M8xxx-ENT B

Binary data 753892.prm...

Rockwell Automation PM3000 M5 w/ControlNet, Class 0.5 1404-M5xxx-CNT

Binary data 753886.prm...

Rockwell Automation PM3000 M5 w/EtherNetIP,Class 0.5 1404-M5xxx-ENT B

Binary data 753884.prm...

Rockwell Automation PM3000 M4 w/EtherNetIP,Class 1 1404-M4xxx-ENT B

Binary data 753882.prm...

Rockwell Automation PM3000 M6 w/EtherNetIP,Class 0.5 1404-M6xxx-ENT B

Binary data 753888.prm...

Debian: Security Advisory (DLA-1404-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1404-1 : lava-server security update

CVE-2018-12564 Using the feature to add URLs in the submit page, a user might be able to read any file on the server that is readable by lavaserver and consists of valid yaml. So with this patch the feature is disabled again. For Debian 8 'Jessie', these problems have been fixed in version...