PT-2020-8028 · Aruba · Aruba Instant

Name of the Vulnerable Software and Affected Versions: Aruba Instate versions prior to 4.1.3.0 Aruba Instate versions prior to 4.2.3.1 Description: The issue is caused by insufficient validation of user-supplied input and insufficient checking of parameters. This could allow a malicious user to...

USN-4234-2 firefox regressions

USN-4234-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafte...

The vulnerability in the web protection component of Kaspersky’s antivirus and security products, including Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud, allows attackers to disclose protected information.

The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud lies in the lack of protection for operational data. Exploiting this...

FreeBSD-SA-20:03.thrmisc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:03.thrmisc Security Advisory The FreeBSD Project Topic: kernel stack data disclosure Category: core Module: kernel Announced: 2020-01-28 Credits: Ilja Van...

CVE-2020-5520

The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Realtek SDK Information Disclosure / Code Execution Exploit

Realtek SDK based routers suffer from information disclosure, incorrect access control, insecure password storage, code execution, and incorrectly implemented CAPTCHA vulnerabilities. 1 Sensitive data disclosure and incorrect access control in several series of Realtek SDK based routers...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

CVE-2020-1788

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

The vulnerability of the ThinPro Linux operating system, related to incorrect authorization, allows a perpetrator to disclose protected information.

The vulnerability of the ThinPro Linux operating system is related to incorrect authorization. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the implementation of the Intel Transactional Synchronization Extensions (TSX) technology in microprogramming software for Intel processors allows a hacker to disclose protected information.

The vulnerability of the Intel Transactional Synchronization Extensions TSX implementation in Intel microcomputer software is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information by launching attacks through...

Security Bulletin: IBM API Connect is impacted by a vulnerability in Elastic Logstash (CVE-2019-7612)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-7612 DESCRIPTION: A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash...

Huawei Mate 20 has an unspecified vulnerability

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability in previous versions of Huawei Mate 20 10.0.0.175 C00E70R3P8, which stems from the program's failure to perform adequate authentication, can be exploited by a local attacker to disclose information and...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2020-03012)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

CVE-2020-2723

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

DEBIAN-CVE-2020-2593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2019-16468

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-16466

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-16467

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-2616

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Repository. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via...

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor drivers of NVIDIA GeForce, Quadro, and Tesla allows an attacker to disclose protected information or cause system failures.

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor NVIDIA GeForce, Quadro, and Tesla driver involves resolution processing errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause system failures...