CVE-2020-8881

CVE-2020-8881 affects Foxit Studio Photo 3.6.6.916 (and earlier, per CNVD citations) where the vulnerability exists in TIF file processing due to the program not validating the existence of an object before performing operations. This leads to remote code execution in the context of the current p...

CVE-2020-8880

Foxit Studio Photo 3.6.6.916 is affected by a TIF file parsing vulnerability. The flaw arises from improper validation during TIF data handling, causing a read past the end of an allocated structure and enabling remote code execution. Exploitation requires user interaction (the target opening a m...

CVE-2020-8880

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-8882

CVE-2020-8882 affects Foxit Studio Photo (notably version 3.6.6.916 and related builds such as 3.6.6.918 and earlier). The root cause is a failure to properly initialize a pointer before it is accessed while processing PSD files, enabling remote code execution. Successful exploitation requires us...

CVE-2020-8878

Foxit Studio Photo 3.6.6.916 is affected by a PSD file handling vulnerability. The root cause is improper validation of user-supplied data, causing a write past the end of an allocated structure. This enables remote code execution in the context of the current process. Exploitation requires user ...

CVE-2020-8879

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-8877

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-8877

The CVE-2020-8877 issue affects Foxit Studio Photo, with a PSD file handling flaw causing an out‑of‑bounds/read past end condition. Affected product: Foxit Studio Photo 3.6.6.916 (and, per CNVD, earlier 3.6.6.918 and earlier versions). Root cause: improper validation of user-supplied PSD data lea...

CVE-2020-8862

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

CVE-2020-8861

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

CVE-2020-8862

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

CVE-2020-8862

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

CVE-2020-8862

CVE-2020-8862 affects D-Link DAP-2610 firmware v2.01RC067, allowing network-adjacent attackers to bypass authentication due to improper password handling, enabling arbitrary code execution in root. Multiple sources (ZDI-20-266) describe an authentication bypass without requiring credentials; Red ...

CVE-2020-8861

The CVE-2020-8861 issue affects D-Link DAP-1330 1.10B01 BETA Wi‑Fi range extenders. It arises from incorrect handling of HNAP login requests and cookies, enabling network‑adjacent attackers to bypass authentication. The vulnerability has been described as allowing the attacker to execute arbitrar...

CVE-2020-8860

CVE-2020-8860 affects Samsung Galaxy S10 devices with Exynos SoCs (G973FXXS3ASJA etc.). The flaw is a buffer overflow in the Call Control Setup messages, caused by inadequate validation of the length of user-supplied data copied into a fixed-length, stack-based buffer. This enables remote code ex...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4285-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4285-1 advisory. It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacke...

USN-4285-1 linux-aws-5.0, linux-azure, linux-gcp, linux-gke-5.0, linux-oracle-5.0 vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that the HSA Linux kernel driver for AMD GPU devices did not...

USN-4285-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that the HSA Linux kernel driver for AMD GPU devices did not...