14911 matches found
KB4577049: Windows 10 September 2020 Security Update
The remote Windows host is missing security update 4577049. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...
KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update
The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
USN-4485-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Timothy Michaud discovered that the i915 graphics driver in the Linux kernel did not properly validate user memory locations for the i915gemexecbuffer2ioctl. A local attacker could possibly use this to cause a denial of service or execute arbitrary code. CVE-2018-20669 It was discovered that the...
audio-books.club Cross Site Scripting vulnerability OBB-1294818
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
...
Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4485-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4485-1 advisory. Timothy Michaud discovered that the i915 graphics driver in the Linux kernel did not properly validate user memory locations for the...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1325-1 Rating: important References: 1065600 1065729 1071995 1083548 1085030 1085308 1087082 1111666 1112178 1113956 1133021 1144333 1152148 1163524 1165629 1166965 1169790 1170232 1171688 1172073...
spitfireaudio.com Cross Site Scripting vulnerability OBB-1290046
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists as the MediaError message property leaks cross-origin response status when trying to load a non-video in an audio/video context...
audio-books.club Cross Site Scripting vulnerability OBB-1285431
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-14415
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
CVE-2020-14415
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
Design/Logic Flaw
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
CVE-2020-14415
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
CVE-2020-14415
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
CVE-2020-14415
Technical details are not publicly provided in the supplied documents. The VULN is described (QEMU oss_write prior to 5.0.0), but no affected versions, impact, or fixes are detailed here — monitor for updates.
CVE-2020-14415
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
audio-klassiker.de Cross Site Scripting vulnerability OBB-1280046
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
chromium-browser: Use after free in audio
Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the Windows operating system’s Media Audio Codec component, allowing a hacker to execute arbitrary code.
The vulnerability of the Windows Media Audio Codec component is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...