12415 matches found
USN-4309-1 vim vulnerabilities
It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS CVE-2017-11109 It was discovered that Vim incorrectly handled certain files. An...
PT-2020-9056 · Pki-Core +3 · Pki-Core +3
Name of the Vulnerable Software and Affected Versions: pki-core versions 10.x.x Description: A vulnerability was found in the Key Recovery Authority KRA Agent Service where it did not properly sanitize the recovery request search page, enabling a Reflected Cross Site Scripting XSS vulnerability. ...
CVE-2020-8600
Trend Micro Worry-Free Business Security 9.0, 9.5, 10.0 is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication...
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-21501)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...
Google Android Resource Management Error Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A resource management error vulnerability exists in the parseTrackFragmentRun of the MPEG4Extractor.cpp file in Android version 10, which can be exploited by an attacker to cause a denial of...
Google Android Framework elevation of privilege vulnerability (CNVD-2020-17499)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A security vulnerability exists in Framework in Android version 10. An attacker can exploit the vulnerability to elevate privileges...
Unspecified Vulnerability in Google Android System (CNVD-2020-17468)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to elevate privileges...
Google Android Buffer Overflow Vulnerability (CNVD-2020-17484)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer error vulnerability exists in StatsService in Android version 10. An attacker can exploit the vulnerability to obtain information...
Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-17465)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to obtain information...
ZOHO ManageEngine Password Manager Pro Cross-Site Request Forgery Vulnerability
ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO USA. A cross-site request forgery vulnerability exists in Zoho ManageEngine Password Manager Pro 10.4 and earlier versions, which stems from the program's failure to protect against cross-site request forgery attacks. An...
Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-17466)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to obtain information...
March 17, 2020—KB4541329 (OS Build 14393.3595)
None None...
Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-17463)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to obtain information...
Google Android Code Execution Vulnerability (CNVD-2020-19577)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components.VPN is one of the VPN Virtual Private Network components.Bluetooth is one of the Bluetooth components. A security vulnerability exists in the...
Google Android Framework elevation of privilege vulnerability (CNVD-2020-17501)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A security vulnerability exists in Framework in Android version 10, which stems from improper input validation. The vulnerability can b...
Google Android System Out-of-Bounds Write Vulnerability (CNVD-2020-17464)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to elevate privileges...
March 17, 2020—KB4541330 (OS Build 16299.1775)
None None...
CVE-2020-9347
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...