SUSE: Security Advisory (SUSE-SU-2016:2008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0653-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Outlook Buffer Overflow

The vulnerability of the Microsoft Outlook email client, as well as the Microsoft 365 Apps for Enterprise and Microsoft Office products, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

openSUSE: Security Advisory for evolution-data-server (openSUSE-SU-2021:0482-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Remote Code Execution

system.text.encodings.web is vulnerable to remote code execution. A buffer overrun allows an attacker to remotely execute arbitrary code on the host OS...

Apache Guacamole RCE

The vulnerability of the Apache Guacamole software for remote administration of client machines is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Google Chrome TabStrip Code Execution

The vulnerability of the TabStrip control element in Google Chrome browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

Google Chrome Screen Capture Code Execution

The vulnerability of the Screen Capture function in Google Chrome browsers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or trigger a denial-of-service attack using a specially created...

Google Chrome IPC Unauthorized Access

The vulnerability of the Google Chrome browser’s IPC implementation relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

Google Chrome TabStrip Code Execution

The vulnerability of the TabStrip control element in Google Chrome browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

Titan M Android Privilege Escalation

The vulnerability of the Titan M security module in Android operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

Titan M Android Privilege Escalation

The vulnerability of the Titan M security module in Android operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

Interactive Graphical SCADA System Buffer Overflow

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Chrome V8 Engine DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to data writing beyond the buffer. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

iSCSI subsystem Linux Data Compromise

The vulnerability of the iSCSI subsystem in Linux operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data through specially created Netlink messages...

Windows User Profile Service DoS

The vulnerability of the Windows User Profile Service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

OPENSUSE-SU-2021:0482-1 Security update for evolution-data-server

This update for evolution-data-server fixes the following issues: - CVE-2020-16117: Fix crash on malformed server response with minimal capabilities bsc1174712. - CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 bsc1173910. - Fix buffer overrun when parsing base64 data bsc1182882...

Security update for evolution-data-server (moderate)

openSUSE Security Update: Security update for evolution-data-server Announcement ID: openSUSE-SU-2021:0482-1 Rating: moderate References: 1173910 1174712 1182882 Cross-References: CVE-2020-14928 CVE-2020-16117 CVSS scores: CVE-2020-14928 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N...

USN-3685-2 ruby2.0 regression

USN-3685-1 fixed a vulnerability in Ruby. The fix for CVE-2017-0903 introduced a regression in Ruby. This update fixes the problem. Original advisory details: Some of these CVE were already addressed in previous USN: 3439-1, 3553-1, 3528-1. Here we address for the remain releases. It was discover...

PDF viewer Heap Buffer Overflow DoS

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the issue of operations going beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to cause servic...