CVE-2020-0544

Insufficient control flow management in the kernel mode driver for some IntelR Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in some IntelR Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12339

The vulnerability CVE-2020-12339 affects Intel® Collaboration Suite for WebRTC before version 4.3.1, due to insufficient control flow management in the API. An authenticated user could potentially escalate privileges via network access, with there being no user interaction required (per CVSS 3.1)...

CVE-2020-12339

Insufficient control flow management in the API for the IntelR Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2020-0521

CVE-2020-0521 affects Intel graphics drivers where a deficiency in control-flow management in the graphics driver stack could allow an authenticated local attacker to escalate privileges. The Intel advisory (Intel-SA-00438) confirms the issue is in some Intel Graphics Drivers for Windows and Linu...

CVE-2020-0544

Insufficient control flow management in the kernel mode driver for some IntelR Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0544

CVE-2020-0544 affects Intel® Graphics Drivers; root cause is insufficient control flow management in the kernel-mode driver. An authenticated, local attacker could potentially escalate privileges. Affected are some Intel graphics drivers prior to version 15.36.39.5145. Intel/Intel SA advisory rec...

CVE-2020-0521: Undefined Security Weakness

Insufficient control flow management in some IntelR Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access...

openSUSE Security Update : opera (openSUSE-2021-296)

This update for opera fixes the following issues : - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement clientcapabilities negotiation for Flow / Sync - DNA-90560 Search Tabs Open Tabs On Top - DNA-90620 Add opauto tests for...

Stable Channel Update for Desktop

The Stable channel has been updated to 88.0.4324.182 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

Batflat Code Injection Vulnerability

Batflat is a free lightweight, fast and simple CMS from Batflat. A code injection vulnerability exists in Batflat 1.3.6 that stems from the failure of a web system or product to properly filter specific elements of externally entered data during the construction of a code snippet. An attacker cou...

Trend Micro Security 2020 Code Injection Vulnerability

A code injection vulnerability exists in Trend Micro Security that originates from a network system or product that does not properly filter specific elements of externally entered data during the construction of a code segment. An attacker could exploit the vulnerability to generate an illegal...

Intel® Collaboration Suite for WebRTC Advisory

Summary: A potential security vulnerability in the Intel® Collaboration Suite for WebRTC may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12339 Description: Insufficient control flow management ...

The vulnerability of the eDocLib platform for storing and processing corporate data lies in the insufficient verification of input data. This allows a malicious actor to alter the execution sequence of programs and gain access to system reference materials without having the necessary access rights.

The vulnerability of the eDocLib platform for storing and processing corporate data is related to insufficient validation of input data. Users who do not have permission to access certain system reference guides including the access management reference guide may gain access to these guides throu...

SUSE-SU-2021:0298-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - openvswitch was updated to 2.5.11 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 - datapath: Clear the L4 portion of the key for 'later' fragments - datapath: Properly set L4 keys on 'later' IP fragments -...

The vulnerability of the detection mechanism for applications in the Snort intrusion detection system allows attackers to increase their privileges.

The vulnerability of the detection mechanism of the Snort intrusion detection system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

CVE-2020-5427

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution...

CVE-2020-5427

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution...

Sql injection

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution...

CVE-2020-5427

Spring Cloud Data Flow is affected by CVE-2020-5427 in versions 2.6.x prior to 2.6.5 and 2.5.x prior to 2.5.4, where the task execution sorting query is vulnerable to SQL injection. The issue stems from the vulnerable SQL path when requesting task execution. Remediation is to upgrade to version 2...