The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the XPMReader::ReadXPM function in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XPMReader::ReadXPM function in the OpenOffice office suite is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through...

The vulnerability of the /rpc/api component of the Red Hat Spacewalk system management software allows a attacker to disclose sensitive information, cause service failures, or execute arbitrary code.

The vulnerability of the /rpc/api component of the Red Hat Spacewalk software suite relates to incorrect restrictions on XML links to external objects. Exploitation of this vulnerability could allow a malicious actor to disclose sensitive information, cause service failures, or execute arbitrary...

CVE-2020-9522

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

PT-2020-17854 · Helm +1 · Helm +1

Name of the Vulnerable Software and Affected Versions: Helm versions 3.0.0 through 3.2.3 Description: A path traversal attack is possible when installing Helm plugins from a tar archive over HTTP, allowing a malicious plugin author to inject a relative path into a plugin archive and copy a file...

DEBIAN-CVE-2020-0543

Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Code injection

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log file which could be used in further attacks against the system. IBM X-Force ID: 181779...

PT-2020-1264 · Sqlite +9 · Sqlite +9

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.32.3 Description: The issue is related to a heap overflow in SQLite due to the misuse of transitive properties for constant propagation, which can lead to local information disclosure. This is caused by a missing...

PT-2020-3024 · Ijg +1 · Libjpeg +1

Name of the Vulnerable Software and Affected Versions: IJG JPEG aka libjpeg versions prior to 9d Description: The issue is related to the jpeg mem available function in jmemnobs.c in djpeg, which does not honor the max memory to use setting, possibly causing excessive memory consumption. This cou...

CVE-2020-9645

Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery ssrf vulnerability. Successful exploitation could lead to sensitive information disclosure...

shifter.sapo.pt Improper Access Control vulnerability OBB-1193475

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-0205

In the DaalaBitReader constructor of entropydecoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0191

In ih264dupdatedefaultindexlist of ih264ddpbmgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0147

In btuhcifescoconnectionchgevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0154

In nciproccorersp of ncihrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-3023 · Ijg +1 · Libjpeg +1

Name of the Vulnerable Software and Affected Versions: IJG JPEG aka libjpeg versions 8 through 9c Description: The issue is related to an out-of-bounds array read in the jdhuff.c component of the libjpeg library, which can lead to the disclosure of protected information or cause a denial of...

UPnP denial of service vulnerability

UPnP is a Universal Plug and Play protocol from the Open Connectivity Foundation. A security vulnerability exists in versions of UPnP prior to 2020-04-17. An attacker could exploit the vulnerability by sending traffic to an arbitrary location with the help of the SUBSCRIBE feature, resulting in a...

CVE-2020-13844

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."...