Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2020-2552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : vino (EulerOS-SA-2020-2569)

According to the version of the vino package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak CWE-655 in VNC server code, which allow an attacker to read stack...

Oracle Linux 7 : xorg-x11-server (ELSA-2020-5408)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5408 advisory. - CVE fix for: CVE-2020-25712 1904937, CVE-2020-14360 1904934 Tenable has extracted the preceding description block directly from the Oracle Linux...

EulerOS 2.0 SP8 : xorg-x11-server (EulerOS-SA-2020-2538)

According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

CVE-2020-27255

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to th...

Heap overflow

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to th...

CVE-2020-27255

CVE-2020-27255 affects FactoryTalk Linx 6.11 and earlier. It describes a heap-based buffer overflow in handling set attribute requests, enabling a remote, unauthenticated attacker to cause information leakage and potentially bypass ASLR. The entry is supported by multiple sources (RH advisory con...

CVE-2020-27255

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to th...

CVE-2020-27255: Heap-based Buffer Overflow

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to th...

PT-2020-16669

Name of the Vulnerable Software and Affected Versions FactoryTalk Linx versions 6.11 and prior Description A heap overflow issue exists, allowing a remote, unauthenticated attacker to send malicious set attribute requests. This could result in the leaking of sensitive information, potentially...

IBM Tivoli Storage Manager 5.2.0.1 Buffer Overflow

Exploit Title: IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow Exploit Author: Paolo Stagno aka VoidSec Vendor Homepage: https://www.ibm.com/support/knowledgecenter/en/SSGSG77.1.0/com.ibm.itsm.tsm.doc/welcome.html Version: 5.2.0.1...

CVE-2020-24434

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2020-24427

Acrobat Reader versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage this vulnerability to...

CVE-2020-24426

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Design/Logic Flaw

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Input validation

Acrobat Reader versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage this vulnerability to...

Design/Logic Flaw

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...