CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

Design/Logic Flaw

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

CVE-2020-10757

CVE-2020-10757 affects the Linux kernel (post 4.5-rc1) where mremap mishandles DAX Huge Pages, enabling a local attacker with DAX storage access to escalate privileges. Connected advisories (RHEL/CentOS, Amazon Linux 2, IBM QRadar-related entries) confirm kernel patches/fixes are available and re...

Linux kernel buffer overflow vulnerability (CNVD-2020-35957)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the way mremap handles DAX Huge Pages in versions of Linux kernel after 4.5-rc1. An attacker can exploit this vulnerability t...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

CVE-2020-10757

A flaw was found in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system. Mitigation Do not use DAX enabled storage...

UBUNTU-CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

CVE-2020-10757

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system...

Unspecified vulnerability in Google Chrome accessibility

Google Chrome is a web browser of Google Google, Inc. accessibility is one of the auxiliary functions of the plug-in. A security vulnerability exists in accessibility in Google Chrome versions prior to 74.0.3729.108, which can be exploited by remote attackers to obtain sensitive information from...

Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2020-32316)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A buffer overflow vulnerability exists in V8 in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to cause heap corruption with the help of special...

Unspecified vulnerability in Google Chrome notifications

Google Chrome is a web browser by Google, Inc. notifications is one of the notification components. A security vulnerability in notifications in versions of Google Chrome prior to 74.0.3729.108 exists because the program fails to fully enforce policies, which can be exploited by remote attackers ...

Google Chrome Security Bypass Vulnerability (CNVD-2020-32324)

Google Chrome is a web browser from Google, AppCache is an application caching plugin. A security vulnerability exists in AppCache in Google Chrome versions prior to 80.0.3987.87. A remote attacker can exploit this vulnerability to bypass AppCache security restrictions with the help of specially...

Google Chrome CSS Code Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in CSS in Google Chrome versions prior to 11.0.0.0. A remote attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted HTML pages...

Unspecified Vulnerability in Google Chrome CSP

Google Chrome is a web browser from Google, Inc.CSP is a content security policy plugin. A security vulnerability exists in CSP in versions of Google Chrome prior to 80.0.3987.87, which stems from the program's failure to adequately enforce policies, and can be exploited by a remote attacker to...

DEBIAN-CVE-2020-6502

Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...

The vulnerability of the Cisco Firepower Management Center software’s web interface allows a perpetrator to redirect users to malicious web pages.

The vulnerability of the Cisco Firepower Management Center software’s web interface is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to redirect users to malicious web pages by intercepting and modifying user HTTP reques...

PT-2020-1258 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7.3 Description: The issue is related to the get user pages aka gup implementation in mm/gup.c and mm/huge memory.c, which does not properly consider the semantics of read operations when used for a...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted web pages...