530 matches found
PT-2020-16119
Name of the Vulnerable Software and Affected Versions Xen versions 4.11 through 4.14.x Description An issue in Xen allows an x86 PV guest to trigger a host OS crash when handling guest access to the MSR MISC ENABLE Model Specific Register. This occurs because Xen reads the value from hardware...
Use-after-free
Linux kernel has a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d...
Trend Micro Apex One elevation of privilege vulnerability (CNVD-2020-52195)
Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. An elevation of privilege vulnerability exists in the logic that controls access to the Misc folder in th...
Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...
GLSA-202008-23 : chrony: Symlink vulnerability
The remote host is affected by the vulnerability described in GLSA-202008-23 chrony: Symlink vulnerability It was found that chrony did not check whether its PID file was a symlink. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with root privileges. Workarou...
openSUSE Security Update : the Linux Kernel (openSUSE-2020-1153)
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow...
GLSA-202007-54 : rsync: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-54 rsync: Multiple vulnerabilities Multiple vulnerabilities have been discovered in rsync within bundled zlib. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...
DEBIAN-CVE-2020-15393
In the Linux kernel 4.4 through 5.7.6, usbtestdisconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770...
CVE-2020-15393
In the Linux kernel 4.4 through 5.7.6, usbtestdisconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770...
CVE-2020-15393: Missing Release of Memory after Effective Lifetime
In the Linux kernel 4.4 through 5.7.6, usbtestdisconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770...
DEBIAN-CVE-2020-15306
An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize in IlmImf/ImfMisc.cpp...
UBUNTU-CVE-2020-11764
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp...
PT-2020-6214 · Openexr +7 · Openexr +7
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 2.4.1 Description: An issue in OpenEXR is related to an out-of-bounds write in the copyIntoFrameBuffer function in ImfMisc.cpp. This can potentially allow a remote attacker to cause a denial of service...
PT-2020-6114
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions prior to 1909 OS Build 18363.719 Trend Micro Worry-Free Business Security 10.0 SP1 Trend Micro OfficeScan affected versions not specified Description A vulnerability in Trend Micro products may allow an attacker t...
CVE-2014-9625: Buffer Copy without Checking Size of Input
The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update...
CVE-2019-19959
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by for example valgrind...
CVE-2019-19959: Undefined Security Weakness
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by for example valgrind...
CVE-2019-19925: Unrestricted Upload of File with Dangerous Type
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive...