1434 matches found
CVE-2020-9683
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-9684
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-9683
Adobe Photoshop CC 2019 and Photoshop 2020 are affected by an out-of-bounds read vulnerability (CVE-2020-9683) that could lead to arbitrary code execution. Root cause: improper validation in the affected image/file processing path. Exploitation details are not provided in the core documents; the ...
CVE-2020-9687
CVE-2020-9687 affects Adobe Photoshop CC 2019 (20.x) and Photoshop 2020 (21.x). The issue is an out-of-bounds write in Photoshop components causing arbitrary code execution on successful exploitation. Affected products with fixed versions: update to Photoshop 20.0.10 (Windows/macOS) and 21.2.1; p...
CVE-2020-9686
Adobe Photoshop CC 2019 and Photoshop 2020 are affected by an out-of-bounds read vulnerability (CVE-2020-9686) that could lead to arbitrary code execution. The issue is triggered in the Photoshop code paths handling certain inputs (as detailed in APSB20-45). Affected versions are prior to 20.0.10...
CVE-2020-9684
Adobe Photoshop CC 2019 and Photoshop 2020 are affected by an out-of-bounds write vulnerability (CVE-2020-9684). Successful exploitation could lead to arbitrary code execution. Affected versions are Photoshop CC 2019 (up to 20.0.9) and Photoshop 2020 (up to 21.2.0); remediation is to update to Ph...
CVE-2020-9684: Out-of-bounds Write
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-9683: Out-of-bounds Read
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-9685: Out-of-bounds Write
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...
Treck IP stacks contain multiple vulnerabilities
Overview Treck IP stack implementations for embedded systems are affected by multiple vulnerabilities. This set of vulnerabilities was researched and reported by JSOF, who calls them Ripple20. Description Treck IP network stack software is designed for and used in a variety of embedded systems. T...
german.blog.wox.cc Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1194779 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-2028
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
CVE-2020-2028
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
Command injection
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
CVE-2020-2028 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
CVE-2020-2028
CVE-2020-2028 describes an OS command injection vulnerability in Palo Alto Networks PAN-OS management server that allows authenticated administrators to execute arbitrary commands with root privileges when uploading a new certificate in FIPS-CC mode. Affected products/versions are PAN-OS 7.1.x, a...
PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification
An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...
CERT/CC Reports Vulnerability in Universal Plug and Play Protocol
The CERT Coordination Center CERT/CC has released information on a vulnerability—CVE-2020-12695—affecting versions of the Universal Plug and Play UPnP protocol released before April 17, 2020. UPnP protocol allows networked devices to discover and connect with each other. A remote attacker could...
cc-hautvaldoise.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173853 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Critical Vulnerability in Citrix Application Delivery Controller, Gateway, and SD-WAN WANOP
Summary Note: As of January 24, 2020, Citrix has released all expected updates in response to CVE-2019-19781.1 On January 19, 2020, Citrix released firmware updates for Citrix Application Delivery Controller ADC and Citrix Gateway versions 11.1 and 12.0. On January 22, 2020, Citrix released...