Design/Logic Flaw

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

Some Receiver Components Fail to Install and Function After Windows 10 Update

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After upgrading Windows 10 to a new feature update and attempting to install Citrix Receiver or the...

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2020-26252)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An information disclosure...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-25882)

The NETGEAR R6700, among others, is a wireless router from NETGEAR. An injection vulnerability exists in multiple NETGEAR products that can be exploited by an attacker to cause the system or product to be parsed or interpreted in an incorrect manner...

FreeBSD ipfw buffer overflow vulnerability (CNVD-2020-32362)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. ipfw is one of the IP firewall components. A buffer overflow vulnerability exists in ipfw in FreeBSD, which stems from a program's failure to properly validate packets, and can be exploited by an attacker to cause kernel...

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s high-performance rendering system, SwiftShader, relates to reading data beyond the buffer in memory, allowing attackers to access confidential data.

The vulnerability of Google Chrome’s high-performance rendering system, SwiftShader, is related to object lifecycle errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Timezone on Clients Running Windows 10 Changes in Citrix VDI from US-EDT to "Caracas" time

Current Timezone is UTC - 05:00 US & Canada - When end users log into a Citrix VDI Windows 7 desktop using a Windows 10 client/host the timezone switches to UTC - 04:00 Caracas. This causes problem with Calendar appointments getting booked in the wrong time zone and being 1/2 hour behind. If we...

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanism lies in errors during the processing of input data, allowing attackers to trigger a service failure.

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the ConfigXmlUtils function in the JDBC driver library allows a attacker to cause a service failure.

The vulnerability of the ConfigXmlUtils function in the JDBC driver library c3p0 is related to errors in processing XML entities. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the _bsotype function in the BSON parsing software package allows a hacker to execute arbitrary code.

The vulnerability of the bsotype function in the BSON parsing software package is related to errors during data deserialization. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Scientific Linux Security Update : evolution on SL7.x x86_64 (20200407)

evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

PT-2020-22858

Уязвимость менеджера файлов fly-fm связана с ошибками при сохранении разрешений. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...

CVE-2019-14019

CVE-2019-14019 involves Qualcomm Snapdragon components across multiple SoCs. The root cause is a read overflows issue due to an improper length check when decoding RAU accept/PDN disconnect Modify EPS/ bearer resource allocations and related requests. The impact is a high/severe condition reporte...

The vulnerability of the SVGKeyValuePairs function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.

The vulnerability of the SVGKeyValuePairs function coders/svg.c in the ImageMagick console-based graphics editor is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted image...

The vulnerability of the PHP interpreter, related to key management errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PHP interpreter is related to key management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Heimdal protocol’s Kerberos implementation, related to errors in managing cryptographic keys, allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the Heimdal protocol’s Kerberos implementation is related to errors in managing cryptographic keys. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

OPENSUSE-SU-2020:0520-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor boo1168630 - CVE-2020-6820: Use-after-free when handling a ReadableStream boo1168630 - CVE-2020-6821: Uninitialized memory could be read when...

PT-2020-2277

Name of the Vulnerable Software and Affected Versions Windows System Assessment Tool WinSAT affected versions not specified Description The issue is related to errors in file operation processing. It may allow an attacker to elevate their privileges using a specially crafted application. The...