CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 68.7.0, Firefox ESR 68.7, and Firefox 75...

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...

Vulnerability fixed in Libssh

Fedora has fixed a vulnerability in Libssh. The vulnerability allows a remote malicious party to perform a Denial-of-Service DoS exploit. -= Fedora =- Fedora has made updates available for Fedora 31. You can install these updates by using the command 'dnf' or 'yum'. More information about these...

Description of the Office 2010 update: December 13, 2011

Description of the Office 2010 update: December 13, 2011 INTRODUCTION Microsoft has released an update for Microsoft Office 2010. This update provides the latest fixes for the 32-bit and the 64-bit editions of Office 2010. Additionally, this update contains stability and performance improvements...

Description of the Office 2013 update: September 10, 2013

Description of the Office 2013 update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for the 32-bit and 64-bit editions of Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains...

Mozilla: Out of bounds write in GMPDecodeData when processing large images

The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code...

Mozilla: Out of bounds write in GMPDecodeData when processing large images

The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code...

CVE-2019-20660

Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...

Mozilla: Out of bounds write in GMPDecodeData when processing large images

The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code...

The values of the 32-bit versions of two registry entries are incorrect in 64-bit versions of Windows 7 or of Windows Server 2008 R2

The values of the 32-bit versions of two registry entries are incorrect in 64-bit versions of Windows 7 or of Windows Server 2008 R2 Symptoms On a computer that is running a 64-bit version of Windows 7 or of Windows Server 2008 R2, 32-bit applications may display incorrect license information...

Mozilla: Out of bounds write in GMPDecodeData when processing large images

The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code...

Unspecified Vulnerability in IBM Resilient

IBM Resilient is a suite of incident response platforms from IBM in the United States. The platform supports functions such as incident response process orchestration and incident management. A security vulnerability exists in IBM Resilient versions 33.x and 34.0 that stems from the program faili...

Mozilla: Out of bounds write in GMPDecodeData when processing large images

The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

GNU C Library Buffer Overflow Vulnerability (CNVD-2020-29729)

The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A buffer overflow vulnerability exists in versions of the GNU C Library prior to 2.31. The vulnerability stems from a networked system or product performing operations in memory without properly...

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the system's failure to properly authorize...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability (CNVD-2020-22000)

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the app locking feature failing to perform...

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Microsoft today announced that it has successfully disrupted the botnet network of the Necurs malware, which has infected more than 9 million computers globally, and also hijacked the majority of its infrastructure. The latest botnet takedown was the result of a coordinated operation involving...

SUSE-SU-2020:0496-1 Security update for mariadb

This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...