CVE-2020-9112

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...

CVE-2020-16904

An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly...

Privilege escalation

An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly...

CVE-2020-16904 Azure Functions Elevation of Privilege Vulnerability

...

CVE-2020-16904

CVE-2020-16904 affects Azure Functions where access keys are not validated correctly for HTTP Functions, allowing an unauthenticated attacker to invoke the function without proper authorization. The vulnerability is an elevation of privilege issue tied to HTTP Functions’ access key validation. Mi...

The vulnerability of the cosl, sinl, sincosl, and tanl functions in the GNU C Library (glibc) allows a attacker to cause a system failure.

The vulnerability of the cosl, sinl, sincosl, and tanl functions in the GNU C Library glibc is related to the execution of these operations outside the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure by damaging the stack when trigonometric...

Azure Functions Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly...

OSV-2020-2054 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26280 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelh void mcchroma...

PT-2020-4387 · Microsoft · Azure Functions

Name of the Vulnerable Software and Affected Versions: Azure Functions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this...

KLA11973 Multiple vulnerabilites in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Network Watcher Agent Virtual Machine Extension for Linux can be exploited...

Arbitrary Code Execution

freerdp is vulnerable to arbitrary code execution. The vulnerability exists through an out-of-bounds read in irp functions...

Wachovia ERP has a logic flaw vulnerability

Huaxia ERP based on SpringBoot framework , aspires to provide small and medium-sized enterprises with open source and good ERP software , currently focusing on sales and inventory + financial functions . HUAXIA ERP has a logic flaw vulnerability that can be exploited by attackers to obtain...

freerdp: out-of-bounds read in irp functions

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...

CVE-2020-22453

Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...

openSUSE Security Update : perl-DBI (openSUSE-2020-1502)

This update for perl-DBI fixes the following issues : Security issues fixed : - CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. - CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. This update was imported from the...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists through a stack consumption vulnerability caused by an infinite recursion in the functions nextistypequal and cplusdemangletype in cp-demangle.c...

SAP Marketing Improper Access Control Vulnerability

SAP Marketing is a suite of marketing solutions for SAP. An improper access control vulnerability exists in SAP Marketing Servlet versions 130, 140, and 150. An authenticated attacker could exploit this vulnerability to invoke certain restricted functions and perform tasks related to interactive...

GNOME Shell: Information disclosure

Background GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. Description It was discovered that GNOME Shell incorrectly handled the login screen password dialog. Impact Please review the referenced CVE identifiers for...

CVE-2020-25251

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client-side authentication is used for critical functions such as adding users or retrieving sensitive information...

CVE-2020-6320

SAP Marketing Servlet, version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Limited knowledge of payload is required for an attacker to exploit the vulnerability and perform tasks related to contact and interaction data which impacts Confidentiali...