42 matches found
The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or trigger service interruptions.
The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge stems from the execution of operations outside of the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures through a...
CVE-2020-27524
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...
CVE-2020-27524
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...
Null pointer dereference
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200024 November 2020...
Huawei EulerOS: Security Advisory for dovecot (EulerOS-SA-2020-2152)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2020-0222 Updated dovecot packages fix security vulnerabilities
Dovecot has been updated to fix several security issues. Sending malformed NOOP command causes crash in submission, submission-login or lmtp service CVE-2020-10957. Sending command followed by sufficient number of newlines triggers a use-after-free bug that might crash submission-login, submissio...
Release Information for Veeam Availability for Nutanix AHV 1.0 Update 3
Challenge Release Notes for Veeam Availability for Nutanix AHV 1.0 Update 3. This update supersedes Veeam Availability for Nutanix AHV 1.0 Update 2. Solution Veeam Availability for Nutanix AHV 1.0 Update 3 includes improvements and fixes for series of issues. The most critical ones are listed...
CVE-2019-11494
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command...
SUSE-SU-2018:0179-1 Security update for wireshark
This update for wireshark to version 2.2.12 fixes the following issues: - CVE-2018-5334: IxVeriWave file could crash bsc1075737 - CVE-2018-5335: WCP dissector could crash bsc1075738 - CVE-2018-5336: Multiple dissector crashes bsc1075739 - CVE-2017-17935: Incorrect handling of '\n' in filereadline...
The vulnerability in the web interface that provides access to the OpenText Documentum Webtop repository is related to incorrect restrictions on XML links to external objects. This allows attackers to read arbitrary files or cause service failures.
The vulnerability in the web interface that provides access to the OpenText Documentum Webtop repository is related to an improper limitation on XML references to external objects XML External Entity, XXE. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotel...
The vulnerability of the __wakeup modification in PHP interpreters allows a attacker to trigger a service failure or exert other effects.
The vulnerability of the wakeup modification in PHP interpreters relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service failures or other effects through specially crafted data, as demonstrated in the exception...
The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a service failure or increase their privileges in the guest operating system.
The vulnerability of the QEMU hardware emulation software arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to cause service failures or increase their privileges in the guest operating system...
The vulnerability of the Thunderbird email client allows attackers to execute arbitrary code, gain access to confidential information, or cause service failures.
The Thunderbird email client contains a vulnerability related to errors in the implementation of the libxul.so!gfxContext::Polygon function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger service...
The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.
The vulnerability of the kernel in iOS and Mac OS X operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or trigger a service denial zero pointer dereferencing through a specially creat...
The vulnerability of Firefox ESR, the rendering software Graphite 2, and the Thunderbird email client, which allows a hacker to trigger a service failure or obtain confidential information.
The vulnerability of the TtfUtil:LocaLookup function in the Firefox ESR browser, the Graphite 2 rendering software, and the Thunderbird email client is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information ...
The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerabilities of the Flash Player and Adobe Integrated Runtime programs are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures remotely...
Juniper Junos J-Web Multiple Vulnerabilities (JSA10682)
According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities in the J-Web component : - A cross-site scripting vulnerability exists due to a failure to validate input before returning it to users. A remote attacker, using a crafted request...
The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures
The vulnerability of the Flash Player software is related to a breach of memory integrity. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...
CA ARCserve Backup Multiple Vulnerabilities (CA20121018) (credentialed check)
The version of CA ARCserve Backup installed on the remote Windows host is potentially affected by multiple vulnerabilities : - A flaw exists with how RPC requests are processed that could lead to code execution on server installations. CVE-2012-2971 - A flaw exists with how RPC requests are...
