810 matches found
CVE-2020-5987
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or...
CVE-2020-5986
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...
IBM Security Secret Server Security Bypass Vulnerability
IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. A security vulnerability exists in IBM Security Secret Server prior to...
Micro Focus Operations Bridge Reporter Authorization Bypass Vulnerability (CNVD-2020-53524)
Micro Focus Operations Bridge Reporter is an IT reporting software that provides resource, incident, and response time reports across server, network, and application environments. An authorization bypass vulnerability exists in Micro Focus Operations Bridge Reporter versions 10.40 and earlier,...
CVE-2020-11857
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user...
CVE-2020-11855
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges...
OPENSUSE-SU-2020:1326-1 Security update for postgresql10
This update for postgresql10 fixes the following issues: - update to 10.14: CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure...
Avaya IP Office Information Disclosure Vulnerability (CNVD-2020-46847)
Avaya IP Office is a small business phone system from Avaya, Inc. in the United States. An information disclosure vulnerability exists in the Web interface component in Avaya IP Office versions 9.x, 10.0 through 10.1.0.7, and 11.0 through 11.0.4.2. The vulnerability stems from an error in...
Google Android Framework Information Disclosure Vulnerability (CNVD-2020-44372)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 10, which can be exploited by attackers to obtain information...
Google Android Framework Remote Code Execution Vulnerability (CNVD-2020-45107)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A security vulnerability exists in Framework in Android version 10. An attacker can exploit the vulnerability to execute code...
IBM Security Guardium Information Disclosure Vulnerability (CNVD-2020-47942)
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in the login page in IBM Security...
SAP Disclosure Management Cross-Site Request Forgery Vulnerability
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A cross-site request forgery vulnerability exists in SAP Disclosure Management version...
CVE-2020-7491
VERSION NOT SUPPORTED WHEN ASSIGNED A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4...
Huawei Mate 30 Pro Improper Authorization Vulnerability
Huawei Mate 30 Pro is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 Pro 10.1.0.150 C00E136R5P3, which stems from the program's failure to properly restrict an application's use of system services. The vulnerability can be...
Apple macOS Catalina CoreAudio Component Buffer Overflow Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A buffer overflow vulnerability exists in the CoreAudio component in Apple macOS Catalina versions prior to 10.15.6. The vulnerability originates when a networked system or product performs an...
CVE-2020-6291
SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration...
HCL AppScan Cross-Site Scripting Vulnerability
HCL AppScan is a suite of dynamic analysis testing tools from HCL India, which is primarily used for web security testing. A cross-site scripting vulnerability exists in HCL AppScan Enterprise Edition version 10.0.0 and earlier. The vulnerability stems from the lack of proper validation of...
PT-2020-14505 · Samsung · Cameralyzer
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with P9.0 and Q10.0 software Description: An issue was discovered that allows attackers to write files to the SD card using Cameralyzer. This affects Samsung mobile devices with P9.0 and Q10.0 software. Recommendations:...
CVE-2020-5972
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10....