Beware a New Google Drive Scam Landing in Inboxes

Scammers are luring people into Google Docs in an attempt to get them to visit potentially malicious websites...

The vulnerability of the Intel SSD Data Center Tool’s management and update tools, related to errors in using standard permissions, allows attackers to escalate their privileges.

The vulnerability of the Intel SSD Data Center Tool, a tool for managing and updating embedded software, is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2020-15003

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...

CVE-2020-15003

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...

CVE-2020-15003

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...

Spoofing

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...

CVE-2020-15003

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...

Unauthorized Access Vulnerability in YiChang Enterprise Cloud Drive

Ltd. is a software developer and system integration and service provider in the field of information security, specializing in the research and development, production and sales of information security technology. An unauthorized access vulnerability exists in YiChang Enterprise Cloud Drive...

The vulnerability of Intel Data Center SSD microprogramming software, related to data flow management errors, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel Data Center SSDs’ microprogrammed software is related to errors in data flow management. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

DEBIAN-CVE-2020-25741

fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...

CVE-2020-25741

fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...

CVE-2020-25741

fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...

CVE-2020-25741

fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...

Open-Xchange: XSS - Notes - Attribute injection through overlapping tags

The Notes app uses simple markup language to format the content, which is later converted to HTML for display. javascript // frontend/ui/apps/io.ox/notes/parser.js parsePlainText: function text var lines = .escapetext.split/\n/, openList; ... var html = lines.join'' .replace/!\.?/g, ''...

freerdp: out-of-bounds read in irp functions

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...

CVE-2020-3396

A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive SSD for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0 SSD and modify sensitive areas of the file system, including the namespace container protections. The vulnerability...

PT-2020-17247 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive SSD for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3...

The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Out-of-bounds (OOB) Read

Android kernelto is vulnerable to Out-of-bounds OOB Read. There is a possible out of bounds read due to a missing bounds check in the f2fs drive. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the ColdFusion interpreter, related to the lack of measures taken to protect the structure of web pages, allows attackers to inject arbitrary web scripts or HTML code and gain access to protected information.

The vulnerability of the ColdFusion interpreter is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to inject arbitrary web scripts or HTML code remotely, gain access to protected information, and modify the appearance of the...