February 11, 2020-KB4538122 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 and Windows Server 2019

None None...

February 11, 2020-KB4537557 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1703

None None...

February 11, 2020-KB4534132 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10 , version 1909 and Windows Server, version 1909

None None...

February 11, 2020-KB4534129 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

None None...

Google Android System elevation of privilege vulnerability (CNVD-2020-04555)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this time...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-07207)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are available at this time...

Google Android System elevation of privilege vulnerability (CNVD-2020-07210)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this time...

Google Android Framework Denial of Service Vulnerability (CNVD-2020-07208)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A denial of service vulnerability exists in the Framework component of Google Android 10. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-07206)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this tim...

Google Android Framework elevation of privilege vulnerability (CNVD-2020-07202)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this tim...

DEBIAN-CVE-2019-15606

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...

DEBIAN-CVE-2019-15605

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed...

ALPINE-CVE-2019-15606

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...

UBUNTU-CVE-2019-15605

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed...

PT-2020-6591 · Node.Js +9 · Node.Js +9

Name of the Vulnerable Software and Affected Versions: Node.js versions 10 through 13 Description: The issue is related to HTTP request smuggling in Node.js, which can lead to the delivery of malicious payloads when the transfer-encoding is malformed. This can allow a remote attacker to access...

USN-4250-2 mariadb-10.1, mariadb-10.3 vulnerability

It was discovered that an unspecified vulnerability existed in the C API component of MariaDB. An attacker could use this to cause a denial of service for MariaDB clients. MariaDB has been updated to 10.3.22 in Ubuntu 19.10 and 10.1.44 in Ubuntu 18.04 LTS. In addition to security fixes, the updat...

CVE-2020-6767

A path traversal vulnerability in the Bosch Video Management System BVMS FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affects...

PT-2020-11391 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 8.0 through 10 Description: The issue is related to a possible out of bounds write due to an incorrect bounds calculation in the Bluetooth stack, which could lead to remote code execution over Bluetooth with no additional...

PT-2020-11542 · Google +4 · Android +4

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to an integer overflow in the exif data load data thumbnail function of exif-data.c, which could lead to a remote denial of service. No additional execution privileges are needed f...

PT-2020-2534 · Node.Js +8 · Node.Js +8

Name of the Vulnerable Software and Affected Versions: Node.js versions 10 through 13 Description: The issue is related to insufficient input validation when processing HTTP headers in Node.js, allowing a remote attacker to gain full control over the application through various network protocols...