Design/Logic Flaw

Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...

Target device boot issue from PVS server - vDisk cannot be accessed (a).

When booting the target device from vDisk we get the following error on pre-boot screen: "vDisk cannot be accessed a."...

Xen Denial of Service Vulnerability (CNVD-2020-53815)

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen versi...

Microsoft Edge (Chromium) < 80.0.361.62 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.62. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds memory access error exists in Google Chrome. An unauthenticated, remote attacker can exploit this, via a crafted HTML pag...

CVE-2020-9593

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-1062

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092...

UBUNTU-CVE-2020-11865

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows out-of-bounds memory access...

The vulnerability of the `__zzip_parse_root_directory` function in the ZZIPlib compression library, related to the occurrence of operations outside the buffer’s boundaries, allows a hacker to trigger a service failure.

The vulnerability of the zzipparserootdirectory function in the ZZIPlib compression library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created zip file...

UBUNTU-CVE-2019-20391

An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash...

CVE-2019-5841

Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2019-15699

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 TLS 1.2 packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of t...

OPENSUSE-SU-2019:1927-1 Security update for zypper, libzypp and libsolv

This update for libzypp and libsolv fixes the following issues: Security issues fixed: - CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c function testcaseread bsc1120629. - CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c function testcasestr2depcomplex in...

fuzz CVE-2019-1118-vulnerability warning-the black bar safety net

! This article is to analysis about CVE-2019-1118, the problem is stack corruption in the OpenType font handling due to negative cubeStackDepth Vulnerability reproduction Build environment, simple to reproduce it git clone https://github.com/adobe-type-tools/afdko cd afdko git checkout 2.8.8 cd c...

Google Android System spaces.h file out-of-bounds read vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An out-of-bounds read vulnerability exists in the Google Android System spaces.h file. The vulnerability stems from a networked system or product performing operations in memory without properly...

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' class MetasploitModule 'QNAP TS-431 QTS %q This module creates a virtual web server and uploads the php payload into it. Admin privileges cannot access a...

Live555 Streaming Media < 2019.02.27 Multiple Vulnerabilities - Linux

Live555 Streaming Media is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Live555 Streaming Media < 2019.02.27 Multiple Vulnerabilities - Windows

Live555 Streaming Media is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

WEM 4.6 - Error accessing to the admin console: "You are not registered as a Workspace Environment Management administrator."

Error while connecting to WEM admin console: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service. Please contact your Workspace Environment Management Administrator to gain access."...

The vulnerability in the set of tools for developing the Hub Device Client SDK for a service that implements artificial intelligence through Azure IoT Edge allows a intruder to execute arbitrary code.

The vulnerability of the Hub Device Client SDK component of the Azure IoT Edge service, which enables the implementation of artificial intelligence capabilities on local devices, is related to errors in the mechanism for accessing objects in memory. Exploiting this vulnerability could allow a...