golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash

A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to supply specific...

Microsoft PerformancePoint Services Remote Code Execution Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

CVE-2020-7695

Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add arbitrary headers to HTTP responses, or even return an arbitrary response body, whenever crafted input is used to construct HTTP headers...

CVE-2020-7695

Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add arbitrary headers to HTTP responses, or even return an arbitrary response body, whenever crafted input is used to construct HTTP headers...

Design/Logic Flaw

Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add arbitrary headers to HTTP responses, or even return an arbitrary response body, whenever crafted input is used to construct HTTP headers...

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...

The vulnerability of the Windows Graphics Component, which allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics Component exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

GNU LibreDWG Null Pointer Dereference Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in GNU LibreDWG versions prior to 0.11. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. An...

CVE-2020-15807

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

Null pointer dereference

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

CVE-2020-15807

GNU LibreDWG (C library) prior to version 0.11 is affected by a NULL pointer dereference when processing crafted input files. This vulnerability, CVE-2020-15807, is documented across multiple feeds (NVD entry notes a NULL pointer dereference; Red Hat/SUSE/CNVD mirrors echo the same description). ...

CVE-2020-15807

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

CVE-2020-3388

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating t...

CVE-2019-20911

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

Heap overflow

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwgencodeentity in commonentitydata.spec...

Design/Logic Flaw

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

CVE-2019-20911

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bitcalcCRC in bits.c, related to a for loop...

CVE-2020-3378 Cisco SD-WAN vManage Software SQL Injection Vulnerability

A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An...

CVE-2020-3378 Cisco SD-WAN vManage Software SQL Injection Vulnerability

A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An...

PT-2020-6931 · Unknown +5 · Libjpeg-Turbo +5

Name of the Vulnerable Software and Affected Versions: libjpeg-turbo affected versions not specified Description: The issue is related to a null pointer dereference in the jcopy sample rows function of the libjpeg-turbo library. This can be triggered by a crafted input file, potentially allowing ...