2637 matches found
Oracle Java SE CVE-2020-2655 Remote Security Vulnerability
Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTPS' protocol. This issue affects the 'JSSE' component. This vulnerability affects the following supported versions: Java SE: 11.0.5, 13.0.1 Technologies Affected Oracle JDKLinux...
Microsoft Office CVE-2020-0652 Memory Corruption Vulnerability
Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Oracle Java SE/Java SE Embedded CVE-2020-2590 Remote Security Vulnerability
Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over 'Kerberos' protocol. This issue affects the 'Security' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231, 11.0.5, 13.0....
Microsoft .NET Framework CVE-2020-0646 Remote Code Execution Vulnerability
Description Microsoft .NET Framework is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Excel CVE-2020-0653 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Microsoft Windows Graphics Components CVE-2020-0607 Information Disclosure Vulnerability
Description Microsoft Windows is prone to a information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 160...
Cisco Emergency Responder CVE-2019-16025 HTML Injection Vulnerability
Description Cisco Emergency Responder is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to...
Cisco IP Phone 6800/7800/8800 Series with Multiplatform Firmware Cross Site Scripting Vulnerability
Description Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware are prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...
Google Android Framework Component Multiple Security Vulnerabilities
Description Google Android is prone to the following security vulnerabilities: 1. Multiple privilege-escalation vulnerabilities 2. A denial-of-service vulnerability An attacker can exploit these issues to gain elevated privileges, and cause denial-of-service conditions. These issues are being...
Google Android Media Framework CVE-2020-0002 Multiple Remote Code Execution Vulnerabilities
Description Google Android is prone to multiple remote code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition. These issues are being tracked by Android Bug ID...
Microsoft Windows '.Group' File Handling Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows Recommendatio...
GitLab Multiple Security Vulnerabilities
Description GitLab is prone to multiple security vulnerabilities. An attacker can exploit these issues to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. GitLab versions prior to 11.4.13, 11.5.x prior to 11.5.6, and 11.6.x prior to 11.6.1 are...
WordPress GDPR Cookie Compliance Plugin Multiple Security Vulnerabilities
Description The GDPR Cookie Compliance plugin for WordPress is prone to an unauthorized-access and a cross-site request-forgery vulnerability. An attacker can exploit these issues to perform certain unauthorized actions and gain unauthorized access. This may lead to further attacks. GDPR Cookie...
Apache Log4j CVE-2019-17571 Deserialization Remote Code Execution Vulnerability
Description Apache Log4j is prone to remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Apache Log4j versions through 1.2.17 are...
PT-2019-19226 · Apple · Xcode
Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 11.2 Description: A memory corruption issue was addressed with improved validation. Processing a maliciously crafted file may lead to arbitrary code execution. Recommendations: For versions prior to 11.2, update to Xco...
hostapd CVE-2019-5062 Denial of Service Vulnerability
Description hostapd is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Technologies Affected W1.F1 Hostapd 2.6 Recommendations Run all software as a nonprivileged user with minimal access rights. To reduce the impact of latent...
Drupal Webform Module Multiple Security Vulnerabilities
Description Webform Module of Drupal is prone to the following multiple security vulnerabilities: 1. An arbitrary-file-overwrite vulnerability 2. A cross-site scripting vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...
Apple iOS and iPadOS CVE-2019-8857 Security Bypass Vulnerability
Description Apple iOS and iPadOS are prone to a security bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. This issue is fixed in Apple iPadOS 13.3 and iOS 13.3. Technologies Affected Apple Ipad Mini- Apple iOS 10 Apple iOS...
Microsoft Windows Media Player CVE-2019-1480 Information Disclosure Vulnerability
Description Microsoft Windows Media Player is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for...
Microsoft Windows Media Player CVE-2019-1481 Information Disclosure Vulnerability
Description Microsoft Windows Media Player is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for...