PT-2020-2585

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to a heap overflow, which could lead to arbitrary code execution if successfully exploited. This allows a remote attacker to execute arbitrary cod...

PT-2020-2586

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to a heap overflow, which could lead to arbitrary code execution if successfully exploited. This allows a remote attacker to execute arbitrary cod...

PT-2020-2584

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to a heap overflow, which could lead to arbitrary code execution if successfully exploited. This allows a remote attacker to execute arbitrary cod...

PT-2020-6360

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read vulnerability. This could allow a remote attacker to disclose protected information. Recommendations For Adobe DNG Softwa...

PT-2020-2583

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to a heap overflow, which could lead to arbitrary code execution if successfully exploited. This allows a remote attacker to execute arbitrary cod...

PT-2020-6359

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This allows a remote attacker to disclose protecte...

PT-2020-6519

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This allows a remote attacker to access confidenti...

PT-2020-6352

Name of the Vulnerable Software and Affected Versions Adobe DNG Software Development Kit SDK versions 1.5 and earlier Description The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This can be achieved by a remote attacker using a...

How a Facebook Bug Took Down Spotify, TikTok, and Other Major iOS Apps

Thank a tiny change to a software development kit for widespread crashes Wednesday, including the Spotify and TikTok apps...

java security update

CentOS Errata and Security Advisory CESA-2020:1507 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

How to Use VSSTrace to Collect VSS Diagnostic Logging

Challenge This article explains how to collect additional VSS diagnostic data with the VSSTrace tool, a Microsoft Windows Software Development Kit SDK component. Cause Veeam products use Microsoft Volume Shadow Copy Service VSS for various tasks. Sometimes it is necessary to go through the...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Denial Of Service (DoS)

IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit is vulnerable to Denial of Service DoS. The attack exists because it does not prevent remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2020-8016

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows...

CVE-2020-8016

CVE-2020-8016 is a local-privilege issue described as a race condition in the packaging of texlive-filesystem affecting SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SLED/SLES 12-SP4/12-SP5, and openSUSE Leap 15.1. The underlying problem: a race condition in linking during packagi...

PT-2020-10924 · Parrot · Parrot Anafi

Name of the Vulnerable Software and Affected Versions: Parrot ANAFI affected versions not specified Description: The web server running on Parrot ANAFI can be crashed due to the SDK command Common CurrentDateTime being sent to the control service with a larger than expected date length...

Unauthorized Access Vulnerability in Kodak Video Surveillance Devices

hereinafter referred to as KODAK is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to solve the visual communication and management...

CVE-2020-9379: Undefined Security Weakness

The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations...

PT-2020-10459 · Heartland & Global Payments · Heartland & Global Payments Php Sdk

Name of the Vulnerable Software and Affected Versions: Heartland & Global Payments PHP SDK versions prior to 2.0.0 Description: The issue concerns the failure to enforce SSL certificate validations in the Gateways/Gateway.php file. This could potentially lead to security risks, as it may allow fo...

CVE-2019-17519

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet...