About the security content of tvOS 14.0

About the security content of tvOS 14.0 This document describes the security content of tvOS 14.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2019-9966

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c...

CVE-2019-9966

The CVE-2019-9966 issue affects XnView Classic 2.48 on Windows. A crafted file can trigger a denial of service (application crash) and may have other unspecified impacts (root cause referenced as xnview+0x38536c). Multiple connected sources corroborate the same impact: remote-facing input via a c...

CVE-2017-9966

CVE-2017-9966 affects Schneider Electric Pelco VideoXpert Enterprise, version 2.0 and earlier. The issue is an improper limitation of access control: by replacing certain executable files, an attacker can obtain system privileges and have code execute with elevated privileges on the host. CVSS in...

Schneider Electric Pelco VideoXpert Enterprise

CVSS v3 7.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: Pelco VideoXpert Enterprise Vulnerabilities: Path Traversal, Improper Access Control AFFECTED PRODUCTS Schneider Electric reports that the vulnerabilities affect the following Pelco...

Pelco VideoXpert Multiple Vulnerabilities

Pelco VideoXpert is prone to multiple vulnerabilities: - Directory traversal vulnerability which allows unauthenticated attackers to read arbitrary files in the context of the web server. CVE-2017-9965 - Missing encryption of sensitive information. The software transmits sensitive data using doub...

CVE-2014-9966

CVE-2014-9966 describes a TOCTOU race condition in Android CAF Secure Display implemented in the Linux kernel used by Android. The vulnerability affects Android releases using CAF’s Linux kernel and Secure Display, with impact on confidentiality, integrity, and availability as reflected in CVSS (...

CVE-2016-9966

The CVE concerns Samsung Note devices running Android L/M/N where the Telecom application receivers lack proper exception handling. This defect can cause system crashes leading to a possible DoS, and may allow privilege escalation. Details across sources (CVE-2016-9966, CNVD-2016-13010, NVD) conf...