13285 matches found
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Windows DNS service for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Windows DNS service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted DNS requests...
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance (ASA) microprogramming software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the Microsoft Windows Graphics component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Microsoft Windows Graphics subsystem in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
The vulnerability of the multimedia framework Media Foundation in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the multimedia framework Media Foundation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability an attacker would need to physically...
PT-2020-2366
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited to elevate privileges or gain access to modify, add, or delete data. This can allow attackers to affect th...
PT-2020-2364
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited to potentially elevate privileges or execute arbitrary code using a specially crafted application. This ca...
PT-2020-2714
Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader versions 2015.006.30518 and earlier Description The issue is related to a security bypass...
PT-2020-2840
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...
PT-2020-2356
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. It may allow an attacker to execute arbitrary code using a...
PT-2020-2728
Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to a security bypass...
PT-2020-2360
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory, which can be exploited to potentially allow an attacker to elevate their privileges or execute arbitrary code using a specially...
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-654)
This update for cacti, cacti-spine fixes the following issues : cacti-spine and cacti were updated to 1.2.12 : cacti fixes : - CVE-2020-7106: Lack of escaping of color items can lead to XSS exposure boo1163749 - Fix multiple graphing bugs and web UI issues - Fix multiple warnings, PHP Exceptions...
FreeBSD : qutebrowser -- Reloading page with certificate errors shows a green URL (452d16bb-920d-11ea-9d20-18a6f7016652)
Qutebrowser developers report : After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the URL was mistakenly displayed as green colors.statusbar.url.successhttps...
Arbitrary Code Execution
libraw is vulnerable to arbitrary code execution. The vulnerability exists as the phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...
The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in setting the integrity of directories. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...
DEBIAN-CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...