Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM Spectrum Control (CVE-2020-14577, CVE-2020-14578,  CVE-2020-14579)

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped and used by IBM Spectrum Control. These issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU July 2020. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61028)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS Catalina suffers from a security vulnerability that stems from an issue when Siri suggests that a user access encrypted data, which could be inappropriately accessed. No details of the...

Unspecified Vulnerability in IBM Security Directory Server (CNVD-2020-68259)

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. IBM Security Directory Server has a security vulnerability th...

Unspecified vulnerability in Apple macOS Catalina (CNVD-2020-61027)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.4, which stems from an application that may be able to trigger sysdiagnosis.No details of the vulnerability are availab...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61031)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. An unspecified vulnerability exists in Apple macOS Catalina. The vulnerability stems from the possibility that a Mac may not lock immediately upon wakeup. No details of the vulnerability are provided...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61030)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.1, which stems from a logic issue where a user sharing their screen may not be able to end the screen sharing. No detai...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect TXSeries for Multiplatforms

Summary TXSeries for Multiplatforms has addressed the following vulnerabilities reported by IBM® Runtime Environment Java™ Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to...

EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2020-2361)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - newoffsets handling in ChopUpSingleUncompressedStrip in tifdirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service...

Apple macOS Catalina has an unspecified vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.6, which stems from a sandboxing process that may be able to bypass sandboxing restrictions. No details of the...

PT-2020-6567 · Openldap +8 · Openldap +8

Name of the Vulnerable Software and Affected Versions: OpenLDAP affected versions not specified Description: A flaw was found in OpenLDAP, allowing an attacker to trigger an assertion failure by sending a malicious packet to be processed by OpenLDAP's slapd server. This flaw poses the highest...

CVE-2020-27653

Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager SRM before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

CVE-2020-27652

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

Design/Logic Flaw

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14621...

Security Bulletin: Security vulnerability in Rational Developer for System z (CVE-2013-0485)

Summary An unspecified vulnerability in IBM Rational Developer for System z could allow remote attackers to execute arbitrary commands via unknown vectors. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

CVE-2020-27183

A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user information, send arbitrary e-mails, escalate the privileges of arbitrary user accounts, and have unspecified other impact...

CVE-2020-27183

A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user information, send arbitrary e-mails, escalate the privileges of arbitrary user accounts, and have unspecified other impact...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59056)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59057)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Security: Roles component of Oracle MySQL Server 8.0.21 and earlier. An attacker could use this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59065)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: PS component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...