1391 matches found
Unbreakable Enterprise kernel-container security update
4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...
PT-2020-19780 · Grpc · Grpc +1
Name of the Vulnerable Software and Affected Versions: grpc versions prior to 1.24.4 @grpc/grpc-js versions prior to 1.1.8 Description: The issue concerns Prototype Pollution via loadPackageDefinition. This affects the grpc and @grpc/grpc-js packages. Recommendations: For grpc versions prior to...
Intel® High Definition Audio Advisory
Summary: A potential security vulnerability in some Intel® High Definition Audio drivers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12307 Description: Improper permissions in some IntelR Hi...
HPSBHF03699 rev. 2 - Intel® High Definition Audio Driver November 2020 Security Update
Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in some Intel® High Definition Audio drivers which may allow escalation of privilege...
Intel High Definition Audio Advisory - Lenovo Support US
No description provided...
Information Disclosure
nifi-framework-core is vulnerable to information disclosure. The vulnerability exists as confidential information from the flow definition configuration JSON could be printed in plaintext...
Sony IPELA Network Camera 1.82.01 - (ftpclient.cgi) Remote Stack Buffer Overflow Exploit
Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow Google Dork: Server: Mida eFramework Exploit Author: LiquidWorm Vendor Homepage: https://pro.sony Version: = 1.82.01 !/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote Stack Buffer...
The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.
The vulnerability of the OneDrive for Windows file sharing service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
CVE-2020-7945
Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1...
mysql: Server: DDL unspecified vulnerability (CPU Oct 2019)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
mysql: Server: DDL unspecified vulnerability (CPU Jan 2020)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
[SECURITY] Fedora 32 Update: eclipse-emf-2.22.0-2.fc32
The Eclipse Modeling Framework EMF and XML Schema Definition XSD plug-i ns...
Xxe
Several XML External Entity XXE vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition DTD in an XML request...
Remote Code Execution in SyliusResourceBundle
Impact Request parameters injected inside an expression evaluated by symfony/expression-language package haven't been sanitized properly. This allows the attacker to access any public service by manipulating that request parameter, allowing for Remote Code Execution. The vulnerable versions...
OSV-2020-1485 Segv on unknown address in clang::Sema::ActOnStartOfFunctionDef
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19623 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnStartOfFunctionDef clang::Parser::ParseFunctionDefinition clang::Parser::ParseDeclGroup...
OSV-2020-1466 Segv on unknown address in clang::Sema::PushDeclContext
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19062 Crash type: Segv on unknown address Crash state: clang::Sema::PushDeclContext clang::Sema::ActOnStartOfObjCMethodDef clang::Parser::ParseLexedObjCMethodDefs...
openSUSE Security Update : nasm (openSUSE-2020-954)
This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...
DEBIAN-CVE-2019-17637
In all versions of Eclipse Web Tools Platform through release 3.18 2020-06, XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences...
SUSE-SU-2020:1843-1 Security update for nasm
This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...
