PT-2020-8014

Name of the Vulnerable Software and Affected Versions: Quiz-master-next plugin versions prior to 4.7.9 for WordPress Description: The issue allows for Cross-Site Request Forgery CSRF with resultant stored Cross-Site Scripting XSS via the question name parameter. This occurs because the js/admin...

Security Bulletin: Multiple vulnerabilities affects IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...

The vulnerability of the Windows Cryptography Next Generation (CNG) service on Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Windows Cryptography Next Generation CNG service for Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the Windows Cryptography Next Generation (CNG) service on Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Windows Cryptography Next Generation CNG service for Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

PT-2020-22664

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash involves the hts md5 update, cram decode slice, and cram next...

VMware ESXi Use-After-Free / Out-Of-Bounds Access Vulnerability

Several security issues have been identified in the VMware ESIx virtual machine monitor VMM. A use-after-free UAF vulnerability in PVNVRAM, a missing return value check in EHCI USB controller leading to private heap information disclosure, and several out-of-bounds reads. Overview ======= We...

CVE-2020-9101

There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected...

Microsoft Windows Cryptography Next Generation Key Isolation Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows CNG Key Isolation...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-52407)

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A buffer overflow vulnerability exists in multiple Huawei...

Microsoft Windows Multiple Vulnerabilities (KB4565524)

This host is missing a critical security update according to Microsoft KB4565524 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1359

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384...

CVE-2020-1384: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359...

PT-2020-3164

Name of the Vulnerable Software and Affected Versions Windows Cryptography Next Generation CNG affected versions not specified Description The issue exists due to improper handling of memory objects by the Windows Cryptography Next Generation CNG service, which can allow an attacker to elevate...

PT-2020-3174

Name of the Vulnerable Software and Affected Versions Windows Cryptography Next Generation CNG Key Isolation service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to improper memory handling by the Windows Cryptography...

htl-template-loader (>=1.2.0, <=3.0.0), ideal-cli (>=1.0.0-alpha.1, <=1.0.0-alpha.3) +1 more potentially affected by unknown CVE via standard-version (8.0.0)

standard-version NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on standard-version and may be impacted: - htl-template-loader =1.2.0, =1.0.0-alpha.1, =1.0.0-alpha.3 - next-standard-version 2.1.3 Source cves: unknown CVE Source advisory...

PT-2020-22306

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse config functions. No information is...

PT-2020-22460

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: backup, lex string,...

PT-2020-22396

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: parser get next char, parser get...

PT-2020-22257

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse key value functions. No information i...

PT-2020-22224

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, specifically a crash type identified as Global-buffer-overflow READ 3. The crash state involves...