Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaws

Adobe has released out-of-band updates addressing critical vulnerabilities in its Photoshop and Acrobat Reader products, which if exploited could allow arbitrary code-execution. Overall, Adobe on Wednesday patched flaws tied to 41 CVEs across its products, 29 of which were critical in severity. T...

Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaws

Adobe has released out-of-band updates addressing critical vulnerabilities in its Photoshop and Acrobat Reader products, which if exploited could allow arbitrary code-execution. Overall, Adobe on Wednesday patched flaws tied to 41 CVEs across its products, 29 of which were critical in severity. T...

CVE-2020-10659

Entrust Entelligence Security Provider ESP before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where for example a user continues to interact with a web site that has an invalid certificate chain...

The vulnerability of Windows operating system’s folder permissions allows attackers to increase their privileges.

The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

zsh: insecure dropping of privileges when unsetting PRIVILEGED option

A flaw was found in zsh. When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. When the RUID and EUID were both non-zero, it is possible to regain the shell's former privileges. Also, the setopt built-in did not correctly report...

CVE-2020-5547

Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet...

Information disclosure

Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet...

CVE-2020-5547

CVE-2020-5547 applies to Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware (versions 1.0.7 and earlier). The issue is a Resource Management Error in the TCP function of the device, which can allow remote attackers to stop network functions or install malware via specially crafted packets....

CVE-2020-5547

Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet...

PT-2020-18522

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELQIC IU1 series IU1-1M20-D version 1.0.7 and earlier Description The issue allows remote attackers to stop the network functions or execute malware via a specially crafted packet. This is due to Resource Management Errors...

GLSA-202003-09 : OpenID library for Ruby: Server-Side Request Forgery

The remote host is affected by the vulnerability described in GLSA-202003-09 OpenID library for Ruby: Server-Side Request Forgery It was discovered that OpenID library for Ruby performed discovery first, and then verification. Impact : A remote attacker could possibly change the URL used for...

OpenID library for Ruby: Server-Side Request Forgery

Background A Ruby library for verifying and serving OpenID identities. Description It was discovered that OpenID library for Ruby performed discovery first, and then verification. Impact A remote attacker could possibly change the URL used for discovery and trick the server into connecting to the...

The vulnerability of the Windows Telephony Service in Windows operating systems stems from errors in memory object handling, which allows an attacker to exploit the system to disclose protected information through a specially created application.

The vulnerability of the Windows Telephony Service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center solution allows a attacker to trigger a service failure.

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center system is related to errors in processing incoming Live Data traffic. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

USN-4298-1 sqlite3 vulnerabilities

It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2019-13734, CVE-2019-13750, CVE-2019-13753 It was discovered that SQLite incorrectly handle...

PT-2020-4011

Name of the Vulnerable Software and Affected Versions: Intel FPGA Programmable Acceleration Card N3000 affected versions not specified Description: The issue is related to improper access control in on-card storage, which may allow a privileged user to potentially enable denial of service via loc...

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the CDPSvc service of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the CDPSvc service for connected user devices in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the CDPSvc service of the Windows operating system, which allows a hacker to escalate their privileges

The vulnerability of the CDPSvc service for connected user devices in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...