9326 matches found
CVE-2020-12802
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...
[SECURITY] Fedora 32 Update: ca-certificates-2020.2.41-1.1.fc32
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
Fedora: Security Advisory for ca-certificates (FEDORA-2020-fb144e7de5)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mozilla: Use-after-free in SharedWorkerService
The Mozilla Foundation Security Advisory describes this flaw as: When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash...
jaegertracing/jaeger information disclosure vulnerability
Jaeger is an open source distributed system monitoring service released by the Linux Foundation , it is mainly used to monitor the distributed system transactions and troubleshooting and so on. A log information disclosure vulnerability exists in versions of jaegertracing/jaeger before 1.18.1. An...
New Hacking-for-Hire Company in India
Citizen Lab has a new report on Dark Basin, a large hacking-for-hire company in India. Key Findings: Dark Basin is a hack-for-hire group that has targeted thousands of individuals and hundreds of institutions on six continents. Targets include advocacy groups and journalists, elected and senior...
Mozilla: Use-after-free in SharedWorkerService
The Mozilla Foundation Security Advisory describes this flaw as: When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash...
The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to increase their privileges.
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
jenkins-git-plugin: stored cross-site scripting
Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability...
CVE-2020-12695
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. Mitigation To mitigate this flaw, close of...
Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-64011)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...
Microsoft Windows Media Foundation Buffer Overflow Vulnerability (CNVD-2021-25980)
Microsoft Windows and Microsoft Windows Server are products of Microsoft Corporation.Microsoft Windows Server is a server operating system.Media Foundation is one of the multimedia application libraries.Media Foundation is one of the multimedia application libraries.Media Foundation is one of the...
Microsoft Media Foundation Memory Corruption Vulnerability
Media Foundation is a new generation of multimedia application libraries introduced by Microsoft on Windows Vista, aiming to provide a unified multimedia audio and video solution for the Windows platform. Developers can use Media Foundation to play video or sound files, transcode multimedia file...
CVE-2020-1238
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239...
CVE-2020-1238
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239...
CVE-2020-1239
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238...
CVE-2020-1239
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238...