17093 matches found
CVE-2020-26243
Nanopb memory-leak in decoding: when dynamic allocation is enabled and a oneof field contains a static submessage with a dynamic field, decoding a message that contains the submessage multiple times can leak memory in versions before 0.4.4 and 0.3.9.7. Fixes are in 0.3.9.7 and 0.4.4. Workarounds ...
Wsb-Detect - Tool To Detect If You Are Running In Windows Sandbox ("WSB")
wsb-detect enables you to detect if you are running in Windows Sandbox "WSB". The sandbox is used by Windows Defender for dynamic analysis, and commonly manually by security analysts and alike. At the tail end of 2019, Microsoft introduced a new feature named Windows Sandbox WSB for short. The...
Nanopb Buffer Error Vulnerability
Nanopb is a protocol buffer implementation for microprocessors by the individual developers of Nanopb. A buffer error vulnerability exists in Nanopb version 0.4.4 and versions prior to 0.3.9.7, which stems from the possibility that a decoded message in a particular format may leak memory if dynam...
PT-2020-16371
Name of the Vulnerable Software and Affected Versions Nanopb versions prior to 0.3.9.7 Nanopb versions prior to 0.4.4 Description Decoding specifically formed messages can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, a...
IBM DB2 Arbitrary Code Execution Vulnerability
IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to...
JetSpeed PDF Editor is vulnerable to dll hijacking.
JetSpeed PDF Editor is a PDF editing software. JetSpeed PDF Editor has a dll hijacking vulnerability. An attacker can exploit the vulnerability to execute malicious code...
The vulnerability of the dynamic calibration tool for microprogramming software for Intel RealSense D400 Series cameras lies in errors related to the use of standard resolutions. This vulnerability allows attackers to exploit their privileges.
The vulnerability of the dynamic calibration tool for microprogrammed cameras from the Intel RealSense D400 Series lies in errors related to the use of standard resolutions. Exploiting this vulnerability can allow attackers to enhance their privileges...
Denial of Service Vulnerability in ZDCC VisualField VFRemoteCmdImpl.dll Component
VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...
Denial of Service Vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll Component (CNVD-2020-69505)
VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDAC, which can be exploited by an attacker to cause the RPC service ...
Adobe Illustrator suffers from a dll hijacking vulnerability (CNVD-2020-69411)
Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. Adobe Illustrator suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll...
Adobe After Effects has a dll hijacking vulnerability (CNVD-2020-69406)
Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. A dll hijacking vulnerability exists in Adobe After Effects. An attacker can exploit this vulnerability to load a maliciou...
Adobe Animate suffers from a dll hijacking vulnerability
Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. Adobe Animate suffers from a dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and...
Adobe Dimension suffers from dll hijacking vulnerability
Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. Adobe Dimension suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll an...
Adobe Lightroom Classic suffers from a dll hijacking vulnerability
Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. Adobe Lightroom Classic suffers from a dll hijacking vulnerability that can be exploited by attackers to load a malicious...
The installers of multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries
Overview The installers of multiple products by SEIKO EPSON CORPORATION contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated wi...
GaussDB Kernel: Dynamic Data Anonymization
Dynamic data anonymization can flexibly protect privacy data based on customized anonymization policies. Therefore, you are advised to enable enablesecuritypolicy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
JVN#26835001: The installers of multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries
The installers of multiple products by SEIKO EPSON CORPORATION contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...
CVE-2020-12495
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...
Design/Logic Flaw
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...