12415 matches found
libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...
Apple macOS Mojave Permissions Vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Mojave versions prior to 10.14, and no details of the vulnerability are available at this time...
Unspecified Vulnerability in Apple iOS and macOS Mojave Live Photos in FaceTime Component
Apple iOS is an operating system developed by Apple Inc. for mobile devices.Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Live Photos in FaceTime component of Apple iOS versions prior to 12.1.4 and macOS Mojave...
Apple macOS Mojave memory corruption vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Mojave version 10.14, which stems from improved input validation addressing memory corruption. No details of the vulnerability are available at this time...
CVE-2020-15914
A cross-site scripting XSS vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker to execute arbitrary Javascript in a target user’s Origin client. An attacker could use this vulnerability to access sensitive data related to the target user’...
Apple macOS Catalina has an unspecified vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.6, which stems from a sandboxing process that may be able to bypass sandboxing restrictions. No details of the...
Buffer overflow vulnerability in multiple Apple products (CNVD-2020-65943)
Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. tvOS is an operating system for smart TVs. A buffer overflow vulnerability exists in the kernel of Apple iOS before 13.6, iPadOS before 13.6, tvOS before 13.4.8, watchOS before 6.2.8, a...
Apple macOS Catalina Login Window Information Disclosure Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. An information disclosure vulnerability exists in the login window of macOS Catalina versions prior to 10.15.6. An attacker can exploit this vulnerability to log in to other user accounts...
Google Android elevation of privilege vulnerability (CNVD-2020-68855)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are provided at this time...
Apple macOS Catalina Kernel Denial of Service Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A denial of service vulnerability exists in the kernel of macOS Catalina versions prior to 10.15.6. A remote attacker could exploit this vulnerability to cause a denial of service...
HPESBHF04002 rev.2 - HPE Proliant Gen10 Servers using Intel Innovation Engine, Physical Access to the Server Could Result in Execution of Unauthenticated Innovation Engine Firmware Leading to a Local Denial of Service
Potential Security Impact: Local: Denial of Service DoS, Unauthorized Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System all current IE firmware HPE Apollo 4200 Gen10 Server all current IE firmware HPE Apollo 4500 System all current IE firmware H...
PT-2020-8661 · Qnap Systems · Photo Station
Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Photo Station versions prior to 5.7.11 QNAP Systems Inc. Photo Station versions prior to 6.0.10 Description: The issue is a cross-site scripting vulnerability that could allow remote attackers to inject malicious code if...
Multiple Apple Products Arbitrary Email Override Vulnerability
Apple iOS, etc. are all products of the American Apple Apple Company. An arbitrary email overwrite vulnerability exists in Apple iOS before 13.6, iPadOS before 13.6, watchOS before 6.2.8, and macOS Catalina before 10.15.6. An attacker can exploit this vulnerability by leveraging a malicious mail...
Package Analytics affected by Windows TCP/IP vulnerability
Microsoft disclosed a critical vulnerability in the way ICMPv6 Router Advertisement packets are handled on Windows 10 and Windows Server 2019. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this...
October 29, 2020—KB4580364 (OS Builds 19041.610 and 19042.610) Preview
None None...
CVE-2020-5145
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system...
CVE-2019-8828
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code...
jackson-databind: Lacks certain xbean-reflect/JNDI blocking
A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...
Vulnerability fixed in management console for 3PAR systems
HP has fixed a vulnerability in the StoreServ Management Console SSMC. SSMC is the Web-based management application for 3PAR StoreServ systems but can also be used to manage other storage systems. The vulnerability allows a malicious remotely able to bypass authentication. HP rates this...