CVE-2020-4600

IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832...

Design/Logic Flaw

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors...

PT-2021-12828

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to improper input validation, which can lead to memory access errors and denial of service when successfully exploited. Recommendations: At the moment, there ...

CVE-2020-9139: Improper Input Validation

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service...

PT-2021-12840

Name of the Vulnerable Software and Affected Versions: Huawei P30 affected versions not specified Description: The issue is related to resource management errors. Local attackers can construct a broadcast message for some applications, causing the application to send this broadcast message. This...

Owasp Json-sanitizer 输入验证错误漏洞

Owasp Json-sanitizer is the Owasp Foundation of a Java-based Json can be based on the text content similar to the Json code library to generate data in Json format . An input validation error vulnerability exists in OWASP JSON -sanitizer prior to version 1.2.2, which stems from the fact that a...

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS involves memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Kaspersky Password Manager’s password manager, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of Kaspersky Password Manager is related to security configuration errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Kaspersky Total Security antivirus protection, related to code errors, allows attackers to increase their privileges.

The vulnerability of the Kaspersky Total Security antivirus protection is related to errors in the code. Exploiting this vulnerability can allow attackers to enhance their privileges by manipulating symbolic links...

The vulnerability of the Windows operating system, related to errors in the code, allows a hacker to bypass Windows’ screen lock security features.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to bypass Windows’ screen lock security features...

The vulnerability of the init process of the loginctl subsystem of Systemd, related to security configuration errors, allows a perpetrator to access confidential data.

The vulnerability of the loginctl process in the initialization and service management subsystem of Systemd is related to security configuration errors. Exploiting this vulnerability can allow an attacker to access confidential data...

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Exchange Server mail server, related to code errors, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Exchange Server email server is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the NTP network protocol, related to errors in data processing, allows attackers to compromise the integrity of data.

The vulnerability of the NTP network protocol is related to errors in data processing. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

SUSE-SU-2021:0097-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-20934: Fixed a use-after-free in shownumastats because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c bsc1179663. -...

PT-2021-1688 · Microsoft · Windows Wlan Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN Service affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows WLAN Service, which is caused by errors in privilege management. Exploitation of this issue may...

PT-2021-1603 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's CSC service. It allows an attacker to potentially elevate their privileges. Recommendations: At...

PT-2021-1682

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows InstallService component, which is caused by errors in privilege management. Exploitation of this issue may allo...

IBM Engineering Workflow Management Information Disclosure Vulnerability

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. An information disclosure vulnerability...

Fedora: Security Advisory for awstats (FEDORA-2020-d1aa0e030c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...