CVE-2020-9645

Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery ssrf vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9643

Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery ssrf vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9648

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser...

HCL Technologies Digital Experience Code Issue Vulnerability

HCL Technologies Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies India. A code issue vulnerability exists in HCL Technologies Digital Experience versions 8.5, 9.0, and 9.5, which arises from an improperly designed or implemented code...

CVE-2020-9835

An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 13.5 and iPadOS 13.5. A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing...

CVE-2020-9818

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination...

CVE-2020-9826

A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker may be able to cause a denial of service...

UBUNTU-CVE-2020-13977

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been...

PT-2020-20789 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 Description: A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary co...

Unspecified Vulnerability in Foxit Reader and Foxit PhantomPDF

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which arises from the program not properly handling synonyms. An attacker could exploit the...

Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability (CNVD-2020-32458)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5. The vulnerability can be exploited to bypass signature verification with modified documents or...

Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vulnerability (CNVD-2020-31245)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. A remote attacker could...

Unspecified Vulnerability in Apple iOS, iPadOS, and macOS Catalina Sandbox Component

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.Sandbox Sandbox is one of the sandbox components. A security vulnerability in the Sandbox component...

Trend Micro InterScan Web Security Virtual Appliance Security Bypass Vulnerability (CNVD-2020-31247)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. A remote attacker could...

Apple iOS, iPadOS and macOS Catalina USB Audio Component Denial of Service Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a dedicated operating system developed for Mac computers.USB USB Audio is one of the digital audio connectivity packages....

CVE-2020-8606

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...

dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption...

DPDK Input Validation Error Vulnerability

DPDK is a data plane development kit for Linux-based platforms. It supports the execution of packet processing on multiple CPU architectures. An input validation error vulnerability exists in DPDK version 17.05 and later. The vulnerability originates from a network system or product that does not...

IBM WebSphere Application Server Code Issue Vulnerability

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A code issue vulnerability exists in IBM WebSphere Application Serv...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...