5104 matches found
libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c
In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-2396)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for icinga2 (openSUSE-SU-2020:1820-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-2356)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1909
CVE-2020-1909 involves a use-after-free in the logging library used by WhatsApp for iOS (and WhatsApp Business for iOS) prior to version 2.20.111. The underlying issue can cause memory corruption and crashes, with a potential for code execution when a specific sequence of events occurs (notably r...
CVE-2020-1909
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only if several events occurred together in sequence, including...
EulerOS 2.0 SP2 : libexif (EulerOS-SA-2020-2356)
According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and...
Fedora 33 : firefox (2020-1a48fa788b)
New upstream version 82.0.2 - Fixed Wayland crashes rhbz1888920 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
FFmpeg Heap-based Buffer Overflow (CVE-2020-12284)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
httpd: mod_http2 concurrent pool usage
A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...
httpd: mod_http2 concurrent pool usage
A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...
Alcatel Lucent Stack Overflow (CVE-2019-3922)
A stack overflow vulnerability exists in Alcatel Lucent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Delta Industrial Automation CNCSoft Buffer Overflow (CVE-2020-7002)
A buffer overflow vulnerability exists in Delta Electronics CNCSoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
SolarWinds DameWare Heap Overflow (CVE-2020-5734)
A heap overflow vulnerability exists in SolarWinds DameWare. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58235)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58750)
MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this vulnerability to cause MySQL Server to...
Oracle MySQL Server Authorization Issues Vulnerability
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An authorization issue vulnerability exists in Oracle MySQL Server Server: PS version 8.0.21 and earlier versions that could allow a highly privilege...
CVE-2020-3317
A vulnerability in the sslinspection component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to crash Snort instances. The vulnerability is due to insufficient input validation in the sslinspection component. An attacker could exploit this...
Buffer overflow
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...
