7845 matches found
CVE-2020-17360
An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of the...
Integer overflow
An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of the...
CVE-2020-17360
CVE-2020-17360 (ReadyTalk Avian 1.2.0) : The vm::arrayCopy boundary checks in classpath-common.h contain integer overflow in two checks, bypassing bounds verification and enabling out-of-bounds reads/writes. This affects Avian JVM 1.2.0 and is noted as impacting products no longer maintained by t...
PT-2020-3683 · Microsoft · Windows Image Acquisition (Wia) Service +1
Name of the Vulnerable Software and Affected Versions: Windows Image Acquisition WIA Service affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the WIA Service's memory contents. This could allow an attacker to obtain information...
About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
CVE-2020-15603
An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...
CVE-2020-15603
An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...
CVE-2020-15603
An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...
PT-2020-14527
Name of the Vulnerable Software and Affected Versions Trend Micro Security 2020 versions 16.0.0.1302 and below Description An invalid memory read issue in the driver of Trend Micro Security 2020 consumer products could allow an attacker to manipulate the driver, causing it to perform a system cal...
CVE-2020-1342
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445...
CVE-2020-10037
A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information...
Mozilla: Information disclosure due to manipulated URL object
The Mozilla Foundation Security Advisory describes this flaw as: Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript...
SUSE SLES12 Security Update : php5 (SUSE-SU-2020:1714-1)
This update for php5 fixes the following issues : CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. CVE-2019-11048: Improved the handling of overly long filename...
PT-2020-5456
Name of the Vulnerable Software and Affected Versions Redis affected versions not specified Description The issue is caused by a buffer overflow in the ziplist.c component of the Redis database management system. This can be exploited by a remote attacker to read a fragment of memory and cause a...
SUSE-SU-2020:1714-1 Security update for php5
This update for php5 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. - CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. - CVE-2019-11048: Improved the handling of overly long...
Code injection
Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...
CVE-2020-11040
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0. Mitigation The flaw can be mitigated by not running the freerdp client with the /gfx connection modes and/or not...
OpenText Webroot endpoint agents type confusion vulnerability
OpenText Webroot endpoint agents is an endpoint security protection agent program from OpenText Canada. A type confusion vulnerability exists in versions prior to OpenText Webroot endpoint agents v9.0.28.48. The vulnerability stems from the system failing to properly check the type of input. An...
CVE-2020-5754
Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP port, resulting in crashing or reading memory contents of the Webroot endpoint agent...
CVE-2020-5754
Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP port, resulting in crashing or reading memory contents of the Webroot endpoint agent...