PT-2020-4878 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of Print Configuration in Windows operating systems, specifically concerning insecure privilege management. This allows an attacker to potentially...

PT-2020-4775 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to errors in code generation management in Microsoft Excel. It allows remote attackers to execute arbitrary code. There is no information provided about the...

PT-2020-4884 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to errors in code generation management in the MTD driver of the Azure Sphere operating system. Exploitation of this issue may allow an attacker to execute arbitra...

PT-2020-4762 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. This could allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

PT-2020-4658 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the win32k component of the Windows operating system. It allows an attacker to potentially elevate their privileges. The...

PT-2020-4876 · Microsoft · Windows Kernelstream +1

Name of the Vulnerable Software and Affected Versions: Windows KernelStream affected versions not specified Description: The issue is related to insufficient security mechanism implementation in the Windows KernelStream component, allowing attackers to obtain sensitive information. This could...

PT-2020-4606

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a spoofing vulnerability in the Windows operating system, which is associated with errors in the representation of information by the user interface. This vulnerabilit...

PT-2020-4605 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. It allows an attacker to elevate their privileges, affecting the system...

PT-2020-4798 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a double free error in Microsoft Excel, which can be exploited to execute arbitrary code. This allows remote attackers to execute code. Recommendations: At t...

PT-2023-21654 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: Database auto-linking filter affected versions not specified Description: The issue arises from the database auto-linking filter's output requiring additional sanitizing to prevent a cross-site scripting XSS risk. This implies that without...

Security Bulletin: Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus. This were disclosed as part of the IBM Java SDK update in July 2020. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified vulnerability in...

Input validation

Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin board via unspecified vector...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM Spectrum Control (CVE-2020-14577, CVE-2020-14578,  CVE-2020-14579)

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped and used by IBM Spectrum Control. These issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU July 2020. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61028)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS Catalina suffers from a security vulnerability that stems from an issue when Siri suggests that a user access encrypted data, which could be inappropriately accessed. No details of the...

Unspecified Vulnerability in IBM Security Directory Server (CNVD-2020-68259)

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. IBM Security Directory Server has a security vulnerability th...

Unspecified vulnerability in Apple macOS Catalina (CNVD-2020-61027)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.4, which stems from an application that may be able to trigger sysdiagnosis.No details of the vulnerability are availab...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61031)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. An unspecified vulnerability exists in Apple macOS Catalina. The vulnerability stems from the possibility that a Mac may not lock immediately upon wakeup. No details of the vulnerability are provided...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61030)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.1, which stems from a logic issue where a user sharing their screen may not be able to end the screen sharing. No detai...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect TXSeries for Multiplatforms

Summary TXSeries for Multiplatforms has addressed the following vulnerabilities reported by IBM® Runtime Environment Java™ Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to...

EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2020-2361)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - newoffsets handling in ChopUpSingleUncompressedStrip in tifdirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service...