13548 matches found
UBUNTU-CVE-2019-15795
python-apt only checks the MD5 sums of downloaded files in Version.fetchbinary and Version.fetchsource of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions...
Servicing stack update for Windows Server 2008 SP2: January 14, 2020
Servicing stack update for Windows Server 2008 SP2: January 14, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your...
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating...
DEBIAN-CVE-2019-18282
The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...
Design/Logic Flaw
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password...
Description of the security update for Office Online Server: January 14, 2020
None None...
Description of the security update for Office 2016: January 14, 2020
None None...
Description of the security update for Office 2013: January 14, 2020
Description of the security update for Office 2013: January 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microso...
Description of the security update for Excel 2016: January 14, 2020
None None...
Description of the security update for Office 2010: January 14, 2020
Description of the security update for Office 2010: January 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microso...
Servicing stack update for Windows 10, version 1903 and 1909: January 14, 2020
None None...
CVE-2020-6949
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account...
CVE-2020-6949
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account...
CVE-2020-6949
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account...
CVE-2020-6949
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account...
mruby memory misreference vulnerability
mruby is a lightweight implementation of the Ruby language that conforms to a portion of the ISO standard. A post-release reuse vulnerability exists in mruby 2.1.0 in mrbgems/mruby-hash-ext/src/hash-ext.c in hashslice. No detailed vulnerability details are provided at this time...
mruby memory misreference vulnerability (CNVD-2020-10638)
mruby is a lightweight implementation of the Ruby language that conforms to a portion of the ISO standard. A security vulnerability exists in mruby 2.1.0 in mrbgems/mruby-hash-ext/src/hash-ext.c in hashvaluesat. No details of the vulnerability are provided at this time...
CVE-2020-6840
In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...