Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

Google Chrome Task Scheduler Confidential Data Access DoS

The vulnerability of Google Chrome’s task scheduler relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...

fly-fm File Manager DoS

The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...

fly-wm Privilege Escalation

The vulnerability of the fly-wm window manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to cause service failures...

Oracle Coherence CacheStore DoS

The vulnerability of the CacheStore component of the Oracle Coherence software platform relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Astra Safepolicy Input Validation DoS

The vulnerability of the astra-safepolicy security configuration is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

Grub2 Buffer Overflow DoS

The vulnerability of the Grub.cfg configuration file of Grub2 operating systems is related to errors in eliminating certain elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

AMQ: Denial of Service via unrecognized field injection

A flaw was found in AMQ Online before 1.5.2, where injecting an invalid field to a user's address space configuration of the user namespace puts AMQ Online in an inconsistent state. In this inconsistent state, the AMQ Online components do not operate properly. For example, the failure of...

Microsoft .NET Bond DoS

The vulnerability of the Microsoft .NET Bond software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SUSE SLED15 / SLES15 Security Update : rust, rust-cbindgen (SUSE-SU-2020:2041-1)

"This update for rust, rust-cbindgen fixes the following issues : rust was updated for use by Firefox 76ESR. Fixed miscompilations with rustc 1.43 that lead to LTO failures bsc1173202 Update to version 1.43.1 Updated openssl-src to 1.1.1g for CVE-2020-1967. Fixed the stabilization of AVX-512...

DEBIAN-CVE-2019-11252

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes...

VM-Series Network Interface Card Information Disclosure

The vulnerability of the VM-Series network firewalls is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...

SAP NetWeaver DoS

The vulnerability of the SAP NetWeaver software integration platform exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PuTTY Encryption DoS

The vulnerability of the PuTTY encryption protection tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

TIFF File Function Heap Buffer Overflow DoS

The vulnerability of the cpSeparateBufToContigBuf function in software for viewing, editing, and converting TIFF files relates to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:1798-1)

This update for mariadb-100 fixes the following issues : mariadb-100 was updated to version 10.0.44 bsc1171550 CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. CVE-2020-2812: Fixed an issue which could have resulted in unauthorized abilit...

libjpeg Heap Buffer Overflow DoS

The vulnerability of the jdhuff.c component in the libjpeg library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...

libjpeg Heap Buffer Overflow DoS

The vulnerability of the readpixel function in the image processing library libjpeg is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

libjpeg Heap Buffer Overflow DoS

The vulnerability of the jpegmemavailable function jmemnobs.c in the libjpeg image processing library involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service failures...

openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0945-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...