PT-2020-4087 · Microsoft · Windows Routing Utilities +1

Name of the Vulnerable Software and Affected Versions: Windows Routing Utilities affected versions not specified Description: The issue is related to errors in handling input data, which can be exploited to cause a denial of service. This can happen when an attacker logs on to an affected system...

USN-4434-1 libvncserver vulnerabilities

Ramin Farajpour Cami discovered that LibVNCServer incorrectly handled certain malformed unix socket names. A remote attacker could exploit this with a crafted socket name, leading to a denial of service, or possibly execute arbitrary code. CVE-2019-20839 It was discovered that LibVNCServer did no...

USN-4433-1 openjdk-lts vulnerabilities

Johannes Kuhn discovered that OpenJDK incorrectly handled access control contexts. An attacker could possibly use this issue to execute arbitrary code. CVE-2020-14556 It was discovered that OpenJDK incorrectly handled memory allocation when reading TIFF image files. An attacker could possibly use...

Deserialization of untrusted data

The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway versions prior to 8.0.10 and Ignition 7 Gateway versions prior to...

CVE-2020-12000

The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway versions prior to 8.0.10 and Ignition 7 Gateway versions prior to...

Creating a HAR file from your browser to share with support

IMPORTANT: Please note that HAR files contain sensitive clear text data including content of pages while recording, such as user names, passwords, keys, etc, and should only be shared with trusted recipients via secure channels such ashttps://cis.citrix.com.Sharing files via email is not...

Inductive Automation Ignition Code Issue Vulnerability

Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, USA. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. A code issue vulnerability exists in the handling of serialized da...

CVE-2020-13114

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...

CVE-2020-13114

CVE-2020-13114 affects libexif up to version 0.6.21, where an unrestricted size in handling Canon EXIF MakerNote data can cause excessive compute time during EXIF decoding (DoS). Affected component: libexif (exif-data.c/maker-note handling). Impact described across multiple advisories: potential ...

The vulnerability of the NtFilterToken ParentTokenId component in Microsoft Windows operating systems, which allows a hacker to increase their privileges.

The vulnerability of the NtFilterToken ParentTokenId component in Microsoft Windows operating systems is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker to increase their privileges...

USN-4361-1 dovecot vulnerabilities

Philippe Antoine discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service. CVE-2020-10957, CVE-2020-10967 Philippe Antoine discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to...

DEBIAN-CVE-2020-11759

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer...

Cloud Native Application Development Enables New Levels of Security Visibility and Control

We are in unique times and it’s important to support each other through unique ways. Snyk is providing a community effort to make a difference through AllTheTalks.online, and Trend Micro is proud to be a sponsor of their virtual fundraiser and tech conference. In today’s threat landscape new clou...

PT-2020-1379 · Cisco · Cisco Ios Xe Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software versions 16.11 and earlier Description: A vulnerability in the software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device due to the existence of default credentials...

The vulnerability of the Google Chrome browser, related to improper data processing, allows a hacker to replace the content in the Omnibox (URL).

The vulnerability of the Google Chrome browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the content in the Omnibox URL bar using IDN homographs...

The vulnerability of the Navigation component in Google Chrome allows a hacker to manipulate the content of the omnibox (URL strings).

The vulnerability of the Navigation component in Google Chrome is related to improper data processing. Exploiting this vulnerability allows a malicious actor to manipulate the content of the omniboxes using a specially created HTML page...

OPENSUSE-SU-2019:2344-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716 bsc1153098. - CVE-2018-10103: Fixed a mishandling of the printing of SMB data bsc1153098. - CVE-2018-10105: Fixed a mishandling of the printing o...

The vulnerability of D-Link DIR-823G router’s microprogramming software, related to the lack of data cleaning measures at the management level, allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands via the /HNAP1 command...

CVE-2016-10948

The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function...

Facebook Records User Audio, Sparking Privacy Questions

Facebook has admitted that it has been transcribing audio chats between its users on its Messenger platform. Sources said that it’s paying hundreds to third-party outside contractors to do so. The latter calls into question Facebook’s data-handling practices when it comes to being open with its...