Apple macOS Catalina Wi-Fi component memory corruption vulnerability (CNVD-2020-32218)

Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Wi-Fi is one of the wireless Internet components. A memory corruption vulnerability exists in the Wi-Fi component of Apple macOS Catalina versions prior to 10.15.5, which can be exploited by an attack...

Unspecified Vulnerability in Apple iOS, iPadOS, and macOS Catalina Sandbox Component

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.Sandbox Sandbox is one of the sandbox components. A security vulnerability in the Sandbox component...

Apple macOS Catalina PackageKit Component Unauthorized Operation Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.PackageKit is an open-source suite of applications for installing and updating Linux software. A security vulnerability exists in the PackageKit component of Apple macOS Catalina versions prior to 10.15.5...

Apple macOS Catalina Security Component Input Validation Error Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A security vulnerability exists in the Security component of Apple macOS Catalina versions prior to 10.15.5. An attacker can exploit the...

Apple iOS, iPadOS and macOS Catalina USB Audio Component Denial of Service Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a dedicated operating system developed for Mac computers.USB USB Audio is one of the digital audio connectivity packages....

Huawei Mate 10 Information Disclosure Vulnerability

Huawei Mate 10 is a smartphone from Chinese company Huawei Huawei. An information disclosure vulnerability exists in previous versions of Huawei Mate 10 10.0.0.143 C00E143R2P4. An attacker can exploit the vulnerability to read certain files without unlocking the phone with the help of a specially...

Apple macOS Catalina PackageKit Component Elevation of Privilege Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.PackageKit is an open-source suite of applications for installing and updating Linux software. A security vulnerability exists in the PackageKit component of Apple macOS Catalina versions prior to 10.15.5...

Apple macOS Catalina Accounts Component Security Restriction Bypass Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Accounts is one of the user account components. A security vulnerability exists in the Accounts component of Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit this vulnerability to...

Apple macOS Catalina Bluetooth component buffer overflow vulnerability (CNVD-2020-34637)

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A buffer overflow vulnerability exists in the Bluetooth component in Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit this vulnerabili...

PT-2020-4071 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Safari versions prior to 13.1.1 iTunes for Windows versions prior to 12.10.7 iCloud for Windows versions prior to 11.2 and...

USN-4371-1 libvirt vulnerabilities

It was discovered that libvirt incorrectly handled an active pool without a target path. A remote attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. CVE-2020-10703 It was discovered that libvirt incorrectly handled memory when retrieving certain...

Update Rollup 7 for System Center 2012 R2 Data Protection Manager

Update Rollup 7 for System Center 2012 R2 Data Protection Manager Notice for users who installed Update Rollup 7 earlier than August 21, 2015 We had an issue with Update Rollup 7 in which expired recovery points were not getting cleaned up, and the release was pulled back. The update rollup was...

UBUNTU-CVE-2020-8021

a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5...

jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Red Hat Keycloak Trust Management Issues Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A trust management issue vulnerability exists in Red Hat Keycloak versions prior to 10.0.0, which stems from a failure to properly perform TLS...

Veritas Technologies APTARE Information Disclosure Vulnerability

Veritas Technologies APTARE is a suite of predictive analytics software for backup, storage, and virtual infrastructures from Veritas Technologies, USA. The software supports features such as storage management and data center optimization. A security vulnerability exists in Veritas Technologies...

Veritas Technologies APTARE Unauthorized Access Vulnerability

Veritas Technologies APTARE is a suite of predictive analytics software for backup, storage, and virtual infrastructures from Veritas Technologies, USA. The software supports features such as storage management and data center optimization. A security vulnerability exists in Veritas Technologies...

CVE-2020-0105

In onKeyguardVisibilityChanged of keystoreservice.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0106

In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0104

In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...