CVE-2020-1425

Summary: CVE-2020-1425 and CVE-2020-1457 describe remote code execution vulnerabilities in Microsoft Windows Codecs Library due to memory-object handling. The CVE-2020-1425 entry reports a network-exploitable issue with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H and CVSS v2 base score...

CVE-2020-1425

creationtimestamp| type| source ---|---|--- 2020-07-01 14:16:02+00:00| seen| https://t.me/truesecator/716 2020-07-02 07:21:19+00:00| seen| https://t.me/informationsecuritychannel/38909 2020-07-06 08:19:08+00:00| seen| https://t.me/SecLabNews/7991 2020-07-27 22:55:18+00:00| seen|...

Microsoft Releases Emergency Security Updates for Windows 10, Server

Microsoft has quietly pushed out two emergency security updates to fix remote code execution bugs in Microsoft Windows Codecs Library. Windows Codecs Library handles how the OS compresses large multimedia files such as photos and videos, and then decodes them for playback within applications. The...

Microsoft Releases Urgent Windows Update to Patch Two Critical Flaws

Microsoft yesterday quietly released out-of-band software updates to patch two high-risk security vulnerabilities affecting hundreds of millions of Windows 10 and Server editions' users. To be noted, Microsoft rushed to deliver patches almost two weeks before the upcoming monthly 'Patch Tuesday...

KLA11826 ACE vulnerabilities in Microsoft Windows

ACE vulnerabilities were found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-1457 CVE-2020-1425 Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2020-1457 high CVE-2020-1425 high KB list Solution...

CVE-2015-1425

JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities...

CVE-2015-1425

JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities...

CVE-2015-1425

Technical details (affected products, vulnerable components, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from vendors, NVD, or advisories to obtain concrete information.

CVE-2019-1425

CVE-2019-1425 (Visual Studio Elevation of Privilege Vulnerability) : The issue arises when Visual Studio fails to properly validate hardlinks during extraction of archived files. Root cause is improper hardlink validation introduced via npm-packages (tar and fstream) used by Visual Studio. Exploi...

KLA11607 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual Studio can be exploited remotely ...

CVE-2013-1425

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...

DEBIAN-CVE-2013-1425

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...

CVE-2013-1425

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...

CVE-2013-1425

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...

CVE-2013-1425

CVE-2013-1425 affects ldap-git-backup; vulnerable versions are prior to 1.0.4. The root cause is incorrect directory permissions that allow exposure of password hashes. Impact stated is partial confidentiality loss (password hashes exposed). No exploitation details or active exploit status are pr...

Security Bulletin: Cross-site scripting vulnerability in IBM Business Process Manager (BPM) - CVE-2017-1425

Summary IBM BPM reflects untrusted user input without fully removing HTML markup. This might allow controlling parts of the user interface, possibly script injection. Vulnerability Details CVEID: CVE-2017-1425 DESCRIPTION: IBM Business Process Manager is vulnerable to cross-site scripting. This...

CVE-2018-1425

CVE-2018-1425 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1, which uses weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. The IBM Security Guardium Big Data Intelligence (SonarG) product is listed as affected wit...

CVE-2016-1425

Cisco IOS 15.02SG5, 15.12SG3, 15.21E, 15.33S, and 15.41.13S allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun66735...

CVE-2016-1425

Cisco IOS 15.02SG5, 15.12SG3, 15.21E, 15.33S, and 15.41.13S allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun66735...

CVE-2016-1425

CVE-2016-1425 affects Cisco IOS releases 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S. The flaw is in LLDP packet processing due to improper handling of crafted LLDP packets, allowing an unauthenticated, adjacent attacker to cause a denial-of-service device crash. Cisco advisories ...