12415 matches found
Update for Work Folders improvements in Windows 7 SP1
Update for Work Folders improvements in Windows 7 SP1 About this update This update ensures that users are able to continue using Work Folders after they upgrade from Windows 7 SP1 to Windows 10. This update must be applied to the client before the upgrade, in order to maintain the sync partnersh...
"Code 10 Device Cannot Start" error for EHCI USB Controller devices in Device Manager in Windows Server 2012 R2
"Code 10 Device Cannot Start" error for EHCI USB Controller devices in Device Manager in Windows Server 2012 R2 This article describes an issue in which you receive a "Code 10 Device Cannot Start" error message for Enhanced Host Controller Interface EHCI USB Controller devices in Device Manager i...
Update to support auto-redirection of Windows Server 2012 R2 Essentials for Windows 10 client connector
Update to support auto-redirection of Windows Server 2012 R2 Essentials for Windows 10 client connector This article describes an update for the Windows 10 client connector that enables it to connect to Windows Server 2012 R2 Essentials. Before you install this update, see the Prerequisites...
CVE-2020-1638
The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...
CVE-2020-11605
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 April 2020...
CVE-2020-11602
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...
Google Android Media framework out-of-bounds write vulnerability (CNVD-2020-24777)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in the Media framework in Android versions 9 and 10. The vulnerability can be exploited ...
Microstrategy Web Code Issue Vulnerability (CNVD-2020-23183)
Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A code issue vulnerability exists in Microstrategy Web version 10.4. The vulnerability arises from an improperly designed or...
Microstrategy Web Information Disclosure Vulnerability
Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A security vulnerability exists in Microstrategy Web version 10.4. An attacker could exploit the vulnerability to obtain informatio...
MicroStrategy Web Cross-Site Scripting Vulnerability (CNVD-2020-23180)
Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A cross-site scripting vulnerability exists in the HTML Container and Insert Text features in Microstrategy Web version 10.4. The...
CVE-2020-3912
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...
CVE-2020-4241
IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM...
CVE-2020-4240
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the system. IBM X-Force ID: 175417...
FasterXML jackson-databind code issue vulnerability (CNVD-2020-21474)
FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML jackson-databind version 2.x prior to 2.9.10.4. No details of the vulnerability are provided at th...
March 30, 2020—KB4554342 (OS Build 16299.1776)
None None...
March 30, 2020—KB4554364 (OS Builds 18362.753 and 18363.753)
None None...
PowerShell-Suite
This repository is an offensive tool for Windows UAC User Account Control bypass. The tool, named "Bypass-UAC," provides a framework to perform UAC bypasses based on auto-elevating IFileOperation COM object method calls. It rewrites PowerShell's PEB Portable Executable Binary to give it the...
PT-2020-12447 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 8.10 through 12.9 Description: The issue is related to a Server-Side Request Forgery SSRF in the project import note feature. This allows an attacker to forge requests from the server, potentially leading to unauthorized acces...
PT-2020-12446 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 12.10 Description: The issue is related to a potential Denial of Service DoS in repository archive download. Recommendations: For versions prior to 12.10, update to version 12.10 or later to resolve the issue...
