9326 matches found
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developer reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...
Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome
A Mozilla Foundation update to the Firefox web browser, released Tuesday, tackles one critical vulnerability and a handful of high-severity bugs. The update, released as Firefox version 84, is also billed by Mozilla as boosting the browser’s performance and adding native support for macOS hardwar...
CVE-2020-35112
The Mozilla Foundation Security Advisory describes this flaw as: If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as .bat...
CVE-2020-26974
The Mozilla Foundation Security Advisory describes this flaw as: When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potentially exploitable crash...
CVE-2020-26971
The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...
CVE-2020-16042
The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...
About the security content of iCloud for Windows 11.5 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
[SECURITY] Fedora 33 Update: mediawiki-1.35.0-1.fc33
MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...
Fedora: Security Advisory for mediawiki (FEDORA-2020-a4802c53d9)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability
Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic LIM for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation OpenEXR suffers from a buffer overflow vulnerability that can be exploited to cause a denial of service via a...
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...
Spoofing
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...
CVE-2020-17145
CVE-2020-17145 affects Azure DevOps Server and Team Foundation Server/Services. The vulnerability is described as a Spoofing Vulnerability, with a MEDIUM severity (CVSSv3 base 5.4) and CVSSv2 base 4.9. Attack vector is network; no user interaction required for CVSSv2, but CVSSv3 indicates user in...
CVE-2020-17145 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
...
CVE-2020-16587
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...
CVE-2020-16588
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...
CVE-2020-16587
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...
