Denial Of Service (DoS)

p11-kit is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library in versions 0.21.1 up to 0.23.21. When the remote entity supplies a byte array...

CVE-2020-17437

CVE-2020-17437 affects uIP 1.0 (used in Contiki 3.0 and similar) where the TCP Urgent flag and Urgent pointer are not properly bounded. When urgent data is ignored, code uses the Urgent pointer as an offset to separate urgent data, but the offset length isn’t checked, allowing the data pointer to...

NewStart CGSL CORE 5.04 / MAIN 5.04 : php Multiple Vulnerabilities (NS-SA-2020-0059)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has php packages installed that are affected by multiple vulnerabilities: - In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HT...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information or cause service failures.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the DCH-compatible Thunderbolt driver, related to the execution of operations beyond the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of the DCH-compatible Thunderbolt driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Intel Trusted Execution Engine’s microprogramming software, related to the use of memory after it is freed, allows attackers to enhance their privileges.

The vulnerability of Intel Trusted Execution Engine TXE microprogramming software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the DAL subsystem of the Intel Converged Security and Manageability Engine (CSME) and the Intel Trusted Execution Engine (TXE) software allows a perpetrator to enhance their privileges.

The vulnerability of the DAL subsystem of the Intel Converged Security and Manageability Engine CSME and the Intel Trusted Execution Engine TXE is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of Adobe InDesign’s computer layout automation tool and the Adobe InDesign Server’s computer layout automation server, related to the issue of executing operations beyond the buffer limits in memory, allows attackers to execute arbitrary code on the target system.

The vulnerability of Adobe InDesign computer layout automation tools and the Adobe InDesign Server automation server is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system...

The vulnerability of the Adobe Illustrator graphic editor, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the Adobe Illustrator graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Design/Logic Flaw

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided...

The vulnerability of the vrrp_print() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the vrrpprint function in the print-vrrp.c utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Click-to-Run component of Microsoft Office applications, which stems from the operation of transferring data out of the buffer into memory, allows attackers to exploit their privileges.

The vulnerability of the Click-to-Run component of Microsoft Office applications is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

KLA11983 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebRTC can be exploited t...

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Information disclosure

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it...

October 13, 2020-KB4579976 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...