CVE-2020-9566

CVE-2020-9566 affects Adobe Bridge 10.0.1 and earlier on Windows and macOS. The vulnerability is a use-after-free in a component of Bridge, enabling arbitrary code execution on successful exploitation. Public reporting in connected docs confirms impact and the existence of an official patch track...

CVE-2020-9595

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-1797

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185C00E74R3P8 have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function...

DEBIAN-CVE-2020-6795

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird 68.5...

PT-2020-6834 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and PDF Editor versions 11.2.1.53537 and earlier Description: The issue is related to an out-of-bounds read operation in memory, which can be exploited by opening a specially crafted malicious file or page, allowing a remote...

MantisBT Command Injection Vulnerability

MantisBT is a lightweight, free and open source, web-based defect tracking system. A command injection vulnerability exists in MantisBT versions prior to 1.3.20 and 2.22.1, which can be exploited by an authenticated attacker to achieve remote code execution...

UBUNTU-CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11969

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2017-7822

The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox 56...

PT-2017-15636 · Microsoft +2 · Internet Explorer +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 26.0.0.131 and earlier Description: A security bypass issue in Adobe Flash Player allows attackers to obtain sensitive information. This issue is related to the Flash API used by Internet Explorer. Successful...

CVE-2017-5160

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly...