CVE-2020-6183

SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sending request to the main SAPOSCOL process and receive responses that may contain data read with user root privileges e.g. size of any directory, system hardware and OS details,...

CVE-2020-5828

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an...

The vulnerability of the autocmd function (window.c) in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the autocmd function window.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Security Advisory - Double Free Memory Vulnerability in Huawei Products

There is a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service. Vulnerability ID: HWPSIRT-2019-12420 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID...

The vulnerability of the `serial_ir_init_module()` function (drivers/media/rc/serial_ir.c) in the Linux kernel allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the serialirinitmodule function drivers/media/rc/serialir.c in the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the integrity, confidentiality, and accessibility of the protected...

The vulnerability in the driver/drivers/usb/misc/adutux.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/misc/adutux.c kernel of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for glusterfs (EulerOS-SA-2019-1192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : Mesa (SUSE-SU-2020:0145-1)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

OPENSUSE-SU-2020:0084-1 Security update for Mesa

This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. This update was imported from the SUSE:SLE-15-SP1:Update update project...

SUSE-SU-2020:0145-1 Security update for Mesa

This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015...

SUSE-SU-2020:0132-1 Security update for Mesa

This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015...

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2018-20783

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to pharparsepharfile in...

CVE-2019-15625

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information...

Foxit Reader Memory Misreference Vulnerability (CNVD-2020-04097)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Microsoft Excel Code Execution Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel that stems from the software's failure to properly handle memory objects. The vulnerability can be exploited to execute arbitrary code in the context of...

CVE-2020-0613

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627,...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4228-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4228-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...

CVE-2019-20063

CVE-2019-20063 affects libmysofa prior to version 0.8, caused by an uninitialized use of memory in hdf/dataobject.c, demonstrated by mysofa2json. Several advisories confirm the issue and list it among CVEs fixed by updating to libmysofa 0.9.1 (openSUSE SU-2021-444/OSV entries; openSUSE backports)...