CVE-2020-8223: Improper Privilege Management

A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves...

Intel BIOS Privilege Escalation

The vulnerability of Intel processor BIOS microprogramming software is related to a logical error. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause service failures, or compromise the confidentiality of protected information...

Information disclosure

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8...

CVE-2020-0379: Undefined Security Weakness

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8...

Information disclosure

Logic error in BIOS firmware for 8th, 9th and 10th Generation IntelR CoreTM Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access...

CVE-2020-24457

CVE-2020-24457 is a BIOS firmware logic error affecting 8th–10th Gen Intel Core platforms. The issue can allow an unauthenticated user with physical access to achieve escalation of privilege, denial of service, and information disclosure. Root cause: a logic error in BIOS firmware (Intel BIOS Adv...

Intel BIOS Advisory

Summary: Potential security vulnerabilities in BIOS firmware for multiple Intel Platforms may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24457...

PT-2020-3948

Name of the Vulnerable Software and Affected Versions: Intel Core Processors versions 8th through 10th Generation Description: A logic error in the BIOS firmware may allow an unauthenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via...

Cisco NX-OS Enable Secret Privilege Escalation

The vulnerability of the “Enable Secret” function in the Cisco NX-OS network operating system for Cisco Nexus 9000 series routers exists due to a logical error in the implementation of the “enable” command. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2020-11732

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a logic error in the Bluetooth service, allowing a possible spoofing attack. This could lead to remote information disclosure of sensitive information without needing addition...

CVE-2020-3394 Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attack...

CVE-2020-3394 Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attack...

CVE-2020-3394

CVE-2020-3394 affects Cisco Nexus 3000/9000 Series NX-OS in standalone NX-OS mode. A logic error in the Enable Secret/enable command allows an authenticated, local attacker with valid credentials to gain full administrative privileges by issuing the enable command, bypassing the password. The vul...

Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attack...

PT-2020-3778

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode affected versions not specified Description: A logic error in the implementation of the enable command in the Enable Secret feature could allow an...

AIX 7.2 TL 3 : bind (IJ25926)

https://vulners.com/cve/CVE-2020-8616 https://vulners.com/cve/CVE-2020-8616 ISC BIND is vulnerable to a denial of service, caused by the failure to limit the number of fetches performed when processing referrals. By using specially crafted referrals, a remote attacker could exploit this...

AIX 7.2 TL 4 : bind (IJ25927)

https://vulners.com/cve/CVE-2020-8616 https://vulners.com/cve/CVE-2020-8616 ISC BIND is vulnerable to a denial of service, caused by the failure to limit the number of fetches performed when processing referrals. By using specially crafted referrals, a remote attacker could exploit this...

Security Bulletin: Vulnerabilities in BIND affect AIX (CVE-2020-8616 and CVE-2020-8617)

Summary There are vulnerabilities in BIND that affect AIX. Vulnerability Details CVEID: CVE-2020-8617 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a logic error in code which checks TSIG validity. A remote attacker could exploit this vulnerability to trigger an assertion...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2020-9103

HUAWEI Mate 20 smartphones with 9.0.0.205C00E205R2P1 have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of operations to successfully establish P2P connections that are rejected by the peer end. As a result, t...