Buffer overflow

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input...

CVE-2020-5260

A flaw was found in git. Credentials can be leaked through the use of a crafted URL that contains a newline, fooling the credential helper to give information for a different host. Highest threat from the vulnerability is to data confidentiality. Mitigation The most complete workaround is to...

PT-2020-2500 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description: The issue is related to insufficient access control in the WLS Web Services component of Oracle WebLogic Server, allowing a high-privileged attacker with network acces...

The vulnerability of the disable_priv_mode command in the GNU Bash shell, related to improper checking of deleted privileges, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the disableprivmode command in the GNU Bash shell relates to a privilege reset error. This occurs when the command is executed with a valid UID, but the UID does not match its actual value. Exploiting this vulnerability can allow an attacker to access confidential data,...

PT-2020-12796 · Cpp Httplib · Cpp-Httplib

Name of the Vulnerable Software and Affected Versions: cpp-httplib versions 0.5.8 and earlier Description: The issue arises from the lack of filtering for r in parameters passed to the set redirect and set header functions, potentially leading to CRLF injection and HTTP response splitting in...

September 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

September 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 The September 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 platform. We recommend that you apply this update rollup as part of your...

ZSQL: Local Trust Authentication

In local trust authentication mode, a database user can connect to the local database in password-free mode using zsql after the local connection is authenticated. Then, this user can maintain database accounts. You are advised to disable the local trust authentication during service running...

PT-2020-2027

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions prior to the fixed version Description The issue is related to insufficient access control in the VMware Directory Service vmdir of VMware vCenter Server. This can allow a remote attacker to elevate their...

Bisq Bitcoin exchange halts trade due to critical vulnerability

By Deeba Ahmed The Bitcoin exchange further stated that users must disable the recently added alert key function... This is a post from HackRead.com Read the original post: Bisq Bitcoin exchange halts trade due to critical vulnerability...

IBM Security Information Queue Information Disclosure Vulnerability (CNVD-2020-22189)

IBM Security Information Queue is a data integration product from IBM USA. The product utilizes Kafka technology and a publish-subscribe model to integrate data between IBM security products. A security vulnerability exists in IBM Security Information Queue ISIQ that stems from the program's...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-32808)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to disable all sound features by broadcasting...

Design/Logic Flaw

GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service...

CVE-2019-13554

GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service...

CVE-2016-11032

An issue was discovered on Samsung mobile devices with M6.0 software. An attacker can disable all Sound functionality by broadcasting an unprotected intent. The Samsung IDs are SVE-2016-7179 and SVE-2016-7182 November 2016...

nbdkit security and bug fix update

1.8.0-3 - Fix for CVE-2019-14850 denial of service due to premature opening of back-end connection resolves: rhbz1757261 1.8.0-2 - Explicitly disable nbdkit-ext2-plugin in configure resolves: rhbz1724242...

How to Disable "Remember my password" Checkbox - Citrix Receiver for Windows

For security reasons, users might want to disable Windows Receiver "Remember my password" checkbox toprevent an automatic logon without credential required...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

VulnCheck KEV: CVE-2020-20634

Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog...

PT-2020-12453 · Teradici · Teradici Pcoip Management Console

Name of the Vulnerable Software and Affected Versions: Teradici PCoIP Management Console versions 19.11.1 through 20.01.0 Description: The issue allows for unauthenticated password resets via the "login/resetadminpassword" endpoint of the default admin account. This is only possible when the...

Unspecified Vulnerability in Gallery for Samsung Mobile Devices

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Gallery for Samsung mobile devices, which can be exploited by an attacker to permanently disable the Gallery application...