Cerner medico buffer overflow vulnerability (CNVD-2020-26848)

Cerner medico is a healthcare information system from the American company Cerner. The system includes features such as care process management, prescription management, infection prevention and monitoring. A buffer overflow vulnerability exists in Cerner medico version 26.00. The vulnerability...

Intel Driver and Support Assistant Competitive Conditions Issue Vulnerability

Intel Driver and Support Assistant is an Intel Driver and Support Assistant application from Intel Corporation USA. The program is mainly used to detect and install system driver updates. A Competing Conditions Issue vulnerability exists in Intel Driver and Support Assistant versions prior to...

CVE-2020-0557

Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Unspecified Vulnerability in Avast Antivirus (CNVD-2020-22019)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in Avast Service AvastSvc.exe in versions prior to Avast Antivirus 20. An attacker can exploit the vulnerability to bypass access...

Unspecified Vulnerability in Avast Antivirus

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to bypass security restrictions with the...

CVE-2020-10863

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...

CVE-2020-3710

Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

Adobe Illustrator CC Memory Corruption Vulnerability (CNVD-2020-03924)

Illustrator CC is a vector graphics creation tool from Adobe. A memory corruption vulnerability exists in Adobe Illustrator CC 24.0 and earlier versions for Windows-based platforms, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

BullGuard Premium Protection Privileged File Deletion Vulnerability

BullGuard Premium Protection is a computer network security suite from BullGuard UK. A competitive conditions issue vulnerability exists in the malware scanning feature in BullGuard Premium Protection version 20.0.371.8. The vulnerability arises from improper handling of concurrent access when...

lilo Information Disclosure Vulnerability

lilo is a Linux bootstrap program. An information disclosure vulnerability exists in lilo version 23.1, which stems from the program setting /etc/lilo.conf to globally readable. No details of the vulnerability are available at this time...

Unauthorized Access Vulnerability in Gallery 27.0, Qixing Image Library (CNVD-2020-00193)

Qixing Image GalleryGallery is mainly used to store images or videos in the company. An unauthorized access vulnerability exists in Qixing Image Library Gallery 27.0, which can be exploited by attackers to obtain sensitive information...

Adobe Photoshop CC Out-of-Bounds Write Vulnerability (CNVD-2019-27492)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe.Photoshop CC is the Creative Cloud version of Photoshop. An out-of-bounds write vulnerability exists in Adobe Photoshop CC 19.1.8, 20.0.5 and earlier versions. An attacker can exploit this...

Adobe Photoshop CC Out-of-Bounds Read Vulnerability

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe.Photoshop CC is the Creative Cloud version of Photoshop. An out-of-bounds read vulnerability exists in Adobe Photoshop CC 19.1.8, 20.0.5 and earlier versions. An attacker could exploit this...

Adobe Photoshop CC Heap Overflow Vulnerability (CNVD-2019-28654)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe.Photoshop CC is the Creative Cloud version of Photoshop. A heap overflow vulnerability exists in Adobe Photoshop CC 19.1.8, 20.0.5 and earlier versions. An attacker can exploit this vulnerabilit...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

HID Global DigitalPersona U.are.U 4500 Fingerprint Reader Short Key Vulnerability

The HID Global DigitalPersona U.are.U 4500 Fingerprint Reader is a fingerprint reader from HID Global USA. A security vulnerability exists in version v24 of the HID Global DigitalPersona U.are.U 4500 Fingerprint Reader. The vulnerability can be exploited by an attacker to recover a key and decryp...

Crossmatch Digital Crossmatch Digital Persona U.are.U 4500 Fingerprint Reader Encryption Issue Vulnerability

Crossmatch Digital Persona U.are.U 4500 Fingerprint Reader is a fingerprint reader from Crossmatch USA. An encryption issue vulnerability exists in version v24 of the Digital Persona U.are.U 4500 Fingerprint Reader, which can be exploited by an attacker to decrypt an encrypted fingerprint image b...

IBM BigFix WebUI Software Distribution and IBM BigFix WebUI Profile Management SQL Injection Vulnerabilities

IBM BigFix WebUI Software Distribution and IBM BigFix WebUI Profile Management are both products of IBM Corporation of the U.S.A. IBM BigFix WebUI Software Distribution is a software distribution application.IBM BigFix WebUI Profile Management is a configuration management application. IBM BigFix...

Pixar Renderman Elevation of Privilege Vulnerability

Pixar Renderman is a rendering application used in animation and movie production. A local elevation of privilege vulnerability exists in the Installation Assistant tool in version 22.3.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate...

Intel PROSet Wireless Buffer Overflow Vulnerability

Intel PROSet Wireless is a driver for the Intel PROSet wireless card from Intel USA. A buffer overflow vulnerability exists in the command line interface in IntelR PROSet Wireless version 20.50 and earlier. A local attacker could exploit this vulnerability to cause a denial of service...