12584 matches found
CVE-2020-5270
In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts can be many, and vary from the theft of information and credentials to the redirection to malicious websites containing attacker-controlled content, which in some cases even cau...
MGASA-2020-0175 Updated git packages fix security vulnerability
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol CVE-2020-5260...
Cisco IoT Field Network Director Denial of Service Vulnerability
A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...
Cisco Unified Communications Manager Path Traversal Vulnerability
A vulnerability in the Tool for Auto-Registered Phones Support TAPS of Cisco Unified Communications Manager UCM and Cisco Unified Communications Manager Session Management Edition SME could allow an unauthenticated, remote attacker to conduct directory traversal attacks on an affected device. The...
Cisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability
A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol handler of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficien...
MGASA-2020-0164 Updated libvncserver packages fix security vulnerability
Updated libvncserver packages fix security vulnerability: In libvncserver, through libvncclient/cursor.c, there is a possibility of a heap overflow, as reported by Pavel Cheremushkin CVE-2019-15690...
OPENSUSE-SU-2020:0519-1 Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.92 boo1168911: CVE-2020-6454: Use after free in extensions CVE-2020-6423: Use after free in audio CVE-2020-6455: Out of bounds read in WebSQL CVE-2020-6430: Type Confusion in V8 CVE-2020-6456: Insufficient...
Intel® Driver and Support Assistant Advisory
Summary: A potential security vulnerability in the Intel® Driver and Support Assistant may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0568 Description: Race condition in the IntelR Driver and Suppor...
Sierra Wireless Mobile Broadband Software Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30417 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8948 Summary Description: Sierra Wireless reported a potential security vulnerability in Sierra Wireless Mobile Broadband Software that may allow...
Remote Desktop Gateway server crashes during certain user disconnect scenarios in Windows Server 2012 R2
Remote Desktop Gateway server crashes during certain user disconnect scenarios in Windows Server 2012 R2 This article describes an issue in which Remote Desktop RD Gateway server crashes during certain user disconnect scenarios. This issue causes the users to get disconnected and to have trouble...
The Windows Vista Application Compatibility Update
The Windows Vista Application Compatibility Update The update that is described in this article was replaced by a more recent update. To apply the latest update, please click the following article number to view the article in the Microsoft Knowledge Base: 935280 July 2007 Windows Vista Applicati...
SUSE-SU-2020:0954-1 Security update for rubygem-actionview-4_2
This update for rubygem-actionview-42 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView bsc1167240...
DLA-2169-1 libmtp - security update
Bulletin has no description...
Firefox Zero-Day Flaws Exploited in the Wild Get Patched
Mozilla patched two Firefox browser zero-day vulnerabilities actively being exploited in the wild. The flaws, both use-after-free bugs, have been part of “targeted attacks in the wild,” according to a Mozilla Foundation security advisory posted Friday. Both bugs have critical ratings and allow...
GMapFP 3.30,Other
GMapFP 3.30,3.30,Other Related in https://vel.joomla.org/resolved/1835-gmapfp-3-39f-xss-cross-site-scripting new version number 3.55...
MGASA-2020-0153 Updated weechat packages fix security vulnerabilities
Updated weechat packages fix security vulnerabilities: An issue was discovered in WeeChat before 2.7.1 0.4.0 to 2.7 are affected. A malformed message 352 who can cause a NULL pointer dereference in the callback function, resulting in a crash CVE-2020-9759. An issue was discovered in WeeChat befor...
Veeam Backup & Replication 10 Cumulative Patch 1
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running version 10 build 10.0.0.4461 prior to installing this update. You can check this under Help | About in the Veeam Backu...
CVE-2020-3900
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to...
CVE-2020-3895
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to...