Linux kernel input validation error vulnerability (CNVD-2020-36521)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An input validation error vulnerability exists in the drivers/tty/vt/keyboard.c file in Linux kernel 5.7.1 and earlier. A local attacker could exploit this vulnerabili...

Raonwiz DEXT5 Editor Arbitrary File Download Vulnerability

Raonwiz DEXT5 Editor is an HTML-based Web editor from the Korean company Raonwiz. A security vulnerability exists in the handler/uploadhandler.jsp file in Raonwiz DEXT5 Editor 3.5.1402961 and earlier versions. An attacker can exploit this vulnerability to download arbitrary files with the help of...

Foxit PhantomPDF code issue vulnerability (CNVD-2020-32447)

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11. The vulnerability stems from a design or implementation problem in the code development process of a networked system or product. An attacker could...

CVE-2020-1797

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185C00E74R3P8 have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function...

Logic Flaw Vulnerability in Particl Resource Management

Particl is a trading system that uses cryptocurrencies. A security vulnerability exists in particl 0.17 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...

CVE-2020-9409

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a...

CVE-2020-10616

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts...

libEMF Denial of Service Vulnerability

libEMF is a library for generating enhanced metafiles. A security vulnerability exists in libEMF 1.0.11 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

Tobesoft Nexacro Code Execution Vulnerability

Tobesoft Nexacro is a unified framework based OSMU single-source multi-purpose application development solution from Tobesoft Korea. A security vulnerability exists in Tobesoft Nexacro 2019.9.25.1 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

Tobesoft Xplatform Code Execution Vulnerability

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in Tobesoft Xplatform 9.2.2.250 and prior versions. A remote attacker ca...

PT-2020-2474 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 10.0.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in the file manager. Successful exploitation could lead to arbitrary code execution, allowing a remote attacker to execute code...

Unspecified Vulnerability in Evenroute IQrouter

Evenroute IQrouter is a smart router from Evenroute USA. A security vulnerability exists in Evenroute IQrouter 3.3.1 and earlier versions that stems from incorrect access control. An attacker can exploit the vulnerability to take control of the device reboot the network, upgrade, reset, etc...

Evenroute IQrouter has an unspecified vulnerability (CNVD-2020-25366)

Evenroute IQrouter is an intelligent router from Evenroute USA. A security vulnerability exists in the 'diagsetpassword' function in the web panel in Evenroute IQrouter 3.3.1 and earlier versions. A remote attacker can exploit this vulnerability to arbitrarily change the root account password...

August 11, 2015, update for Office 2010 (KB3054962)

August 11, 2015, update for Office 2010 KB3054962 This article describes update KB3054962 for Microsoft Office 2010 that was released on August 11, 2015. This update has a prerequisite. Improvements and fixes Fixes the following issue:When you open a file .xlsx, .pptx, or .docx and then save it a...

CVE-2020-1803

Huawei smartphones Honor V20 with versions earlier than 10.0.0.179C636E3R4P3,versions earlier than 10.0.0.180C185E3R3P3,versions earlier than 10.0.0.180C432E10R3P4 have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in...

Autodesk FBX-SDK Type Obfuscation Vulnerability

Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk USA, which is mainly used to convert existing content to FBX format. A type confusion vulnerability exists in Autodesk FBX-SDK 2019.0 and prior versions. An attacker can exploit the vulnerability to read and wri...

Autodesk FBX-SDK Denial of Service Vulnerability (CNVD-2020-26855)

Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk USA, which is mainly used to convert existing content to FBX format. A security vulnerability exists in Autodesk FBX-SDK 2019.0 and earlier versions. An attacker could exploit the vulnerability to cause a denial...

CVE-2020-7081

A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system running it...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23470)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Logging component of MySQL Server 8.0.18 and earlier versions of Oracle MySQL. An attacker could explo...

Squid Heap Overflow Vulnerability

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in Squid 4.7 and earlier versions. An attacker can exploit this vulnerability to cause...