compat-locales-sap bug fix update

The compat-locales-sap packages provide various compatibility locales for use with SAP Application Servers. Bug Fixes: Scriplet errors during installation BZ1688815 Segmentation fault: core dumped /usr/sbin/build-locale-archive BZ1702200...

Cisco Identity Services Engine Data Compromise

The vulnerability of the Cisco Identity Services Engine ISE web interface is related to input validation errors. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Windows Defender Application Control Constrained Language Bypass

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...

eDocLib Error Disclosure

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to an error in the application configuration, which results in the absence of a user-friendly error page. Exploiting this vulnerability allows a malicious actor to disclose system-sensitive information ...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

DirectWrite Disclosure

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

splwow64.exe Privilege Escalation

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Cross site scripting

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...

CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...

Nettle Hash Segmentation Error DoS

The vulnerability of the nettle-hash cryptographic hash function lies in segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure in an application by entering a specially crafted sequence of data into the command line...

infotocap Heap Buffer Overflow DoS

The vulnerability of the strlensse2pminub function located in the file sysdeps/x8664/multiarch/strlen-sse2-pminub.S:39 in the infotocap utility from the ncurses-bin package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a system failure ...

Microsoft Visual Studio Update Service Privilege Escalation

The vulnerability of the Microsoft Visual Studio software update service is related to privilege management errors. Exploiting this vulnerability could allow an attacker to modify arbitrary files using a specially created application...

Windows Privilege Escalation

The vulnerability of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

Microsoft Common Object Runtime Library DoS

The vulnerability of the Microsoft Common Object Runtime Library in the Microsoft .NET Framework is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

dnsrslvr.dll RCE

The vulnerability of the dnsrslvr.dll library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Cisco RV110W Wireless-N VPN Firewalls Web Management Access Information Disclosure

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

Cisco RV110W Wireless-N VPN Firewalls DoS

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router web management interfaces is related to authentication process errors. Exploiting this vulnerability can allow an attacker to disable clients...

data tracking utility Peekfd Segmentation Error DoS

The vulnerability of the data tracking utility’s peekfd function is caused by segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...