Audit Configuration Bypass

The kernel package is vulnerable to Audit Configuration Bypass. The Linux kernel system call auditing implementation on 64-bit systems allow a local, unprivileged user to circumvent a system call audit configuration, if that configuration filtered based on the "syscall" number or arguments...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A deficiency in the clone system call when called with the CLONEPARENT flag permits the caller the parent process to indicate an arbitrary signal it wants to receive when its child process exits. This could lead to a denial of service of the parent proce...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted loc...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to a method call error in two identical documents, allows an attacker to access confidential data and compromise its integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a method call error in two identical documents. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

Command Injection

Overview All versions of umount are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an exec call on the umount function . This may allow attackers to execute arbitrary code in the system if the device value passed to the function is...

Memory leak in RPCSS and DcomLaunch services in Windows 8.1 or Windows Serer 2012 R2

Memory leak in RPCSS and DcomLaunch services in Windows 8.1 or Windows Serer 2012 R2 This article describes an issue in which memory leak occurs in Windows remote procedure call service RPCSS and DCOM Server Process Launcher DcomLaunch services in Windows 8.1, Windows RT 8.1, or Windows Server 20...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-31810)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to make video calls without permission and run SS and USSD codes...

DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012

DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012 This article describes a problem in which DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012. An update is available...

CVE-2018-21075

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 April 2018...

CVE-2018-21078

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.0 software. The Contacts application allows attackers to originate video calls because SS Supplementary Service and USSD Unstructured Supplementary Service Data codes are improperly secured. The Samsung ID is SVE-2018-11469...

CVE-2018-21075

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 April 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x software. There is a Clipboard content disclosure in the locked state because the keyboard may be used during an emergency call. The Samsung ID is SVE-2017-11107 April 2018...

CVE-2018-21075

CVE-2018-21075 affects Samsung mobile devices running Android N (7.x) and O (8.x). The issue arises in the Call+ application which can load classes from an unintended path, enabling code execution. This vulnerability is documented in multiple sources (NVD entry, Red Hat advisory, CNVD, CVE listin...

CVE-2018-21075

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 April 2018...

CVE-2018-21077

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x software. There is a Clipboard content disclosure in the locked state because the keyboard may be used during an emergency call. The Samsung ID is SVE-2017-11107 April 2018...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-31817)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. The Samsung mobile device suffers from an input validation error vulnerability that can be exploited by an attacker to interact with the Radio Interface Layer aka R...

Advantech WebAccess/NMS DatabaseMgmtResource OS Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/NMS. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

Authenticating your call centre when everyone is remote

Some unique challenges present themselves as workforce's shift to remote working. One that is not likely top of the pile, but is an easy avenue for abuse is authentication. When I talk about authentication, I don’t mean how users logon or access their emails for example. What I mean is how you...

Denial Of Service (DoS)

The kernel is vulnerable to denial of service in arch/powerpc/kernel/signal32.c and arch/powerpc/kernel/signal64.c via sigreturn system call...

Avast Antivirus Arbitrary File Deletion Vulnerability (CNVD-2020-22013)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to delete arbitrary files from the Avast...