RUSTSEC-2020-0079 `socket2` invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

`socket2` invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

PT-2020-16343 · Teler · Teler

Name of the Vulnerable Software and Affected Versions: teler versions prior to 0.0.1 Description: The issue causes a denial-of-service SIGSEGV when teler is run inside a Docker container and encounters the errors.Exit function. This is because it doesn't get the process ID and process group ID of...

openSUSE: Security Advisory for salt (openSUSE-SU-2020:1833-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Error: "Your logon has expired. Please log on again to continue." When Users Logon to StoreFront 1.2

After IT Administrators enable the ‘requireTokenConsistency’ parameter to ‘true ’ on StoreFront’s ‘store’ configuration file C:\inetpub\wwwroot\Citrix\Web.config users might not be able to access the resources. This feature is used to allow SmartAccess conditions to be passed from StoreFront...

The vulnerability of the command-line interface of the Cisco IOS XE operating system, which allows a hacker to execute commands with root privileges

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to errors that occur during the elimination of certain elements in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute commands with root privileges after the device...

The vulnerability in the kernel of Cisco IOS XE access points and Catalyst devices allows a attacker to cause a malfunction in the device’s operation.

The vulnerability of the Polaris kernel in Cisco IOS XE access points and Cisco Catalyst devices is related to packet processing errors. Exploiting this vulnerability can allow an attacker to cause malfunctions in the device...

PT-2020-6526 · Genivia · Gsoap

Name of the Vulnerable Software and Affected Versions: Genivia gSOAP version 2.8.107 Description: A denial-of-service issue exists in the WS-Security plugin functionality of Genivia gSOAP. This is due to pointer dereference errors when processing SOAP requests. An attacker can exploit this by...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

The vulnerability of the “file transfer” component of the TIBCO Managed File Transfer Platform Server allows a perpetrator to modify any files they choose.

The vulnerability of the “file transfer” component of the TIBCO Managed File Transfer Platform Server is related to errors in the mechanism for processing authentication requests. Exploiting this vulnerability allows a malicious actor to modify arbitrary files remotely...

Google Android Titan-M Component Input Validation Error Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. Titan-M is one of the security components. A security vulnerability exists in the Titan-M component of Google Android. An attacker can exploit the vulnerability to elevate privileges...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

CVE-2020-5658: Undefined Security Weakness

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object processing errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Base3D component of the 3D computer graphics viewer, which allows a hacker to execute arbitrary code.

The vulnerability of the Base3D component in the 3D computer graphics viewer software, 3D Viewer, is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft Dynamics 365 Commerce e-commerce software, related to authentication errors, allows a hacker to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 Commerce e-commerce software relates to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of Microsoft Exchange Server servers, related to errors in message processing, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Exchange Server is related to errors in message processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows User Profile Service (ProfSvc), a service on Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to errors in handling network connections. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...