Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2020-47963)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the MSHTML Engine in Microsoft IE versions 9 and 11, which arises from the program failing to properly validate input...

PT-2020-3719 · Microsoft · Graphics Components +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Components affected versions not specified Description: A remote code execution issue exists in the way Microsoft Graphics Components handle objects in memory. An attacker who successfully exploits this issue could execute...

PT-2020-3793 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation affected versions not specified Description: The issue is caused by a memory corruption vulnerability in Windows Media Foundation, allowing an attacker to potentially install programs, view, change, or delete data, or...

CAJViewer 7.2 suffers from a heap out-of-bounds write vulnerability (CNVD-2020-46055)

CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. CAJViewer 7.2 suffers from a heap out-of-bounds write vulnerability, which can be triggered by an attacker by opening a specially constructed file, causing the software to crash, and can be...

DaviewIndy Memory Misreference Vulnerability

DaViewIndy is a server-based viewer software. A security vulnerability exists in DaviewIndy 8.98.7 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted files...

DaviewIndy Heap Buffer Overflow Vulnerability

DaViewIndy is a server-based viewer software. A heap buffer overflow vulnerability exists in DaviewIndy 8.98.7 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

DaviewIndy Heap Buffer Overflow Vulnerability (CNVD-2020-44283)

DaViewIndy is a server-based viewer software. A heap buffer overflow vulnerability exists in DaviewIndy 8.98.7 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

CVE-2020-3381

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation o...

The vulnerability of the calc_arrow function in the fig2dev file conversion tool allows a hacker to cause a service failure.

The vulnerability of the calcarrow function in the fig2dev file conversion tool is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .fig file...

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Microsoft Windows Codecs Library is one of the audio and video file codecs...

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information by using a specially...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...

Multiple Rockwell Automation Product Input Validation Error Vulnerabilities (CNVD-2020-38695)

Rockwell Automation RSLinx Classic is an industrial communications solution.Rockwell Automation RSLinx Classic is an industrial communications solution.Rockwell Automation FactoryTalk Linx is an industrial communications solution.Rockwell Automation ControlFLASH is a firmware update...

CVE-2020-13977

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been...

DEBIAN-CVE-2020-13977

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been...

Foxit PhantomPDF Mac and Reader for Mac Data Forgery Issue Vulnerability

Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A security vulnerability exists in Foxit PhantomPDF Mac 3.4.0.1012 and earlier versions macOS and Foxit Reader 3.4.0.1012 and earlier versions macOS. An attacker can exploit the...

Qualcomm SM8150 Resource Management Error Vulnerability

The Qualcomm SM8150 is a central processing unit CPU product from Qualcomm Incorporated USA. A resource management error vulnerability exists in the DSP server in the Qualcomm SM8150. A remote attacker could exploit this vulnerability to cause a denial of service with the help of specially crafte...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems allows a intruder to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the...

CVE-2020-9046 Kantech EntraPass Security Management Software - System Permissions Vulnerability

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files...

CVE-2020-12038

Products that use EDS Subsystem: Version 28.0.1 and prior FactoryTalk Linx software Previously called RSLinx Enterprise: Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and...