CVE-2020-8869

Summary: CVE-2020-8869 affects Foxit Studio Photo 3.6.6.916 (Windows). The flaw is in the handling of TIF files, caused by insufficient validation of the length of user-supplied data prior to copying it into a fixed-length stack-based buffer. This can enable an attacker to execute arbitrary code ...

CVE-2020-15637

The CVE-2020-15637 entry concerns Foxit PhantomPDF (and related Foxit products) with a use-after-free flaw in SetLocalDescription that can disclose sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and is described as a local/vec...

CVE-2020-15638

The CVE-2020-15638 entry affects Foxit PhantomPDF (version 9.7.2.29539) where the flaw in NodeProperties::InferReceiverMapsUnsafe arises from insufficient validation of user-supplied data, causing a type confusion condition. This can allow remote code execution in the context of the current proce...

CVE-2020-15635

CVE-2020-15635 affects NETGEAR R6700 routers (AC1750) with firmware 1.0.4.84_10.0.58. The acsd service, listening on TCP port 5916, contains a stack-based buffer overflow caused by improper validation of the length of user-supplied data before copying it into a fixed-length buffer. This allows ne...

CVE-2020-15636

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

CVE-2020-15635

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the acsd service, which...

CVE-2020-15636

The CVE-2020-15636 vulnerability affects NETGEAR routers: R6400, R6700, R7000, R7850, R7900, R8000, RS400, XR300 with firmware 1.0.4.84_10.0.58. The issue resides in the check_ra service, where a crafted raePolicyVersion in RAE_Policy.json can overflow a fixed-length stack-based buffer, allowing ...

CVE-2020-15629

Foxit Studio Photo 3.6.6.922 is affected by a TIF file parsing vulnerability described as a buffer overflow/out-of-bounds write. The issue arises from improper validation of user-supplied data in TIFF handling and can enable remote code execution in the context of the current process. Exploitatio...

CVE-2020-15634

The CVE-2020-15634 issue concerns NETGEAR R6700 routers. The root cause is improper validation of a user-supplied string used as a format specifier during string table file uploads in the web server (httpd). This enables remote code execution by network-adjacent attackers without authentication, ...

CVE-2020-15629

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-15630

Foxit Studio Photo 3.6.6.922 (and affected earlier versions) is affected by a PNG parsing vulnerability that leads to a read past the end of an allocated structure due to improper validation of user-supplied data. This out-of-bounds read can disclose sensitive information and, per the CVE, can be...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0032)

The remote OracleVM system is missing necessary patches to address critical security updates : - uek-rpm: Add OL6 shim conflict for new signing key Eric Snowberg Orabug: 31688239 - Revert 'certs: Add Oracle's new X509 cert into the kernel keyring' Eric Snowberg Orabug: 31688223 - blk-mq: don't...

Race condition

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate...

CVE-2020-15702 TOCTOU in apport

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate...

CVE-2020-15702

CVE-2020-15702 describes a TOCTOU race condition in the Apport component of Ubuntu. The vulnerability allows a local attacker to escalate privileges and potentially execute arbitrary code by exploiting PID recycling after a crash, enabling a root process to inherit the crashed process’ PID. Affec...

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

CVE-2020-15418

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.75020200415. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSRSReport class. Due to the improper restriction of XML Extern...

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

CVE-2020-10930

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...

CVE-2020-10923

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000. A...