Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw was found in the Linux kernel's HFS file system implementation. A local attacker could use this flaw to cause a denial of service by mounting a disk that contains a specially-crafted HFS fil...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a missing boundary check was found in the Linux kernel's HFS file system implementation. A local attacker could use this flaw to cause a denial of service or escalate their privileges by mounting a specially-crafted disk...

Denial Of Service (DoS)

squirrelmail is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way SquirrelMail handled failed log in attempts. A user preference file was created when attempting to log in with a password containing an 8-bit character, even if the username was not valid....

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through a heap overflow flaw in the EFI GUID Partition Table GPT implementation could allow a local attacker to cause a denial of service by mounting a disk containing specially-crafted partition tables...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a heap overflow flaw in the Linux kernel's EFI GUID Partition Table GPT implementation could allow a local attacker to cause a denial of service by mounting a disk that contains specially-crafted partition tables...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a missing validation check was found in the Linux kernel's macpartition implementation, used for supporting file systems created on Mac OS operating systems. A local attacker could use this flaw to cause a denial of servic...

Denial Of Service (DoS)

The Network Time Protocol NTP is vulnerable to Denial Of Service DoS. Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged information about all such packets and replied with an NTP packet that was treated as malformed when received ...

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulenrability exists as a flaw was found in the way that the Java Virtual Machine JVM handled temporary font files. A malicious applet could use this flaw to use large amounts of disk space, causing a denial of service...

Information Disclosure

xen is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the QEMU block format auto-detection, when running fully-virtualized guests and using Qemu images written on removable media USB storage, 3.5" disks. Privileged users of such fully-virtualized guests DomU...

Information Disclosure

xen is vulnerable to information disclosure. A security vulnerability was discovered in the QEMU block format auto-detection, when running fully-virtualized guests. Such fully-virtualized guests, with a raw formatted disk image, were able to write a header to that disk image describing another...

HTML Injection

firefox is vulnerable to HTML injection. A flaw was found in the way Firefox cached web pages on the local disk. A malicious web page may be able to inject arbitrary HTML into a browsing session if the user reloads a targeted site...

Disk Cleanup Wizard addon lets users delete outdated Windows updates on Windows 7 SP1 or Windows Server 2008 R2 SP1

Disk Cleanup Wizard addon lets users delete outdated Windows updates on Windows 7 SP1 or Windows Server 2008 R2 SP1 Introduction This article describes an update for the Disk Cleanup wizard in Windows 7 Service Pack 1 SP1 or in Windows Server 2008 R2 SP1. This update adds a new plugin to the Disk...

Issues that are fixed in System Center 2012 R2 Operations Manager Update Rollup 1

Issues that are fixed in System Center 2012 R2 Operations Manager Update Rollup 1 Introduction This article describes the issues that are fixed in Update Rollup 1 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update...

[SECURITY] Fedora 30 Update: glibc-2.29-29.fc30

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Unexpected ASP.Net application shutdown after many App_Data file changes occur on a server that is running Windows Server 2012 R2

Unexpected ASP.Net application shutdown after many AppData file changes occur on a server that is running Windows Server 2012 R2 Symptoms Consider the following scenario: You have a server that is running Windows Server 2012 R2. You set up a website on Internet Information Services IIS. You creat...

Hyper-V guest may freeze when it is running failover cluster service together with shared VHDX in Windows Server 2012 R2

Hyper-V guest may freeze when it is running failover cluster service together with shared VHDX in Windows Server 2012 R2 This article describes an issue that occurs when a Hyper-V guest is running failover cluster service together with a shared virtual hard disk VHDX in Windows Server 2012 R2...

F2fs-tools fsck.f2fs sanity_check_area_boundary code execution vulnerability

Summary An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

Hardcoded credentials

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk C:\ to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo...

CVE-2020-1988

The issue is an unquoted search path privilege-escalation in Windows releases of Palo Alto GlobalProtect App/Agent. A local, authenticated user who can create files at the root of C:\ or in Program Files could gain SYSTEM privileges. Affected versions: GlobalProtect Agent 5.0.x before 5.0.5 and 4...

CVE-2020-1986 Secdo: Local authenticated users can cause Windows system crash

Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk C:\ to cause a system crash on every login. This issue affects all versions Secdo for Windows...