6431 matches found
Huawei Data Communication: Multiple Vulnerabilities Released on Microsoft security advisory 4025685 (huawei-sa-20170909-01-windows)
Microsoft had released a Security Advisory 4025685 on June 14 to fix multiple critical security vulnerabilities in such systems as Microsoft Windows XP, Windows Server 2003, Windows VISTA, and Windows 8. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a...
CVE-2020-13832
An issue was discovered on Samsung mobile devices with Q10.0 with TEEGRIS on Exynos chipsets software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 June 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with Q10.0 with TEEGRIS on Exynos chipsets software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 June 2020...
DoS via malicious record IDs in WatermelonDB
Impact Medium severity 5.9 https://www.first.org/cvss/calculator/3.0CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H A maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally...
GHSA-38F9-M297-6Q9G DoS via malicious record IDs in WatermelonDB
Impact Medium severity 5.9 https://www.first.org/cvss/calculator/3.0CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H A maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally...
CVE-2019-14066
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...
Integer overflow
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...
CVE-2019-14066
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...
SaltStack FrameWork Vulnerabilities Affecting Cisco Products
On April 29, 2020, the Salt Open Core team notified their community regarding the following two CVE-IDs: CVE-2020-11651: Authentication Bypass Vulnerability CVE-2020-11652: Directory Traversal Vulnerability Cisco Modeling Labs Corporate Edition CML, Cisco TelePresence IX5000 Series, and Cisco...
CVE-2020-10945
Centreon before 19.10.7 exposes Session IDs in server responses...
Design/Logic Flaw
Centreon before 19.10.7 exposes Session IDs in server responses...
CVE-2020-10945
Centreon before 19.10.7 exposes Session IDs in server responses...
CVE-2020-10945
Centreon before 19.10.7 exposes Session IDs in server responses...
About the security content of iCloud for Windows 7.19 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
PT-2020-12439
Name of the Vulnerable Software and Affected Versions Centreon versions prior to 19.10.7 Description The issue exposes Session IDs in server responses, which could potentially be used to exploit the system. Recommendations For versions prior to 19.10.7, update to version 19.10.7 or later to resol...
About the security content of iCloud for Windows 11.2
About the security content of iCloud for Windows 11.2 This document describes the security content of iCloud for Windows 11.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of Safari 13.1.1
About the security content of Safari 13.1.1 This document describes the security content of Safari 13.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of iCloud for Windows 7.19
About the security content of iCloud for Windows 7.19 This document describes the security content of iCloud for Windows 7.19. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of tvOS 13.4.5
About the security content of tvOS 13.4.5 This document describes the security content of tvOS 13.4.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Testing ModSecurity for false positives by books texts
The main things that prevent enabling security solutions like WAF/RASP/IDS/IPS in a blocking mode are false positives. Probably the second one is their inline performance and additional latency, but still. As a cloud-native WAF vendor, we at Wallarm are actively checking our products for false...