9191 matches found
Denial Of Service (DoS)
gpac is vulnerable to denial of service DoS. The vulnerability exists in audiosampleentryAddBox function in isomedia/boxcodebase.c, allowing a malicious user to cause an application crash via a crafted file...
CVE-2020-28950
creationtimestamp| type| source ---|---|--- 2020-12-05 00:27:31+00:00| seen| https://t.me/cibsecurity/17175...
National Instruments Compactrio License Issue Vulnerability
National Instruments Compactrio is an embedded controller for industrial control from National Instruments. An authorization issue vulnerability exists in versions prior to CompactRIO Driver 20.5, which stems from an incorrect privilege setting service for a specific API entry point by default,...
UBUNTU-CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
Tesla Hacked and Stolen Again Using Key Fob
Researchers have demonstrated for the third time how hacking into the key fob of a Tesla can allow someone to access and steal the car in minutes. The new attack again shows a security vulnerability in the keyless entry system of one of the most expensive electric vehicles EVs on the market...
weForms < 1.6.4 - CSV Injection
The plugin allows CSV injection via a form's entry...
CVE-2020-25700
In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.8.6, 3.7.9, 3.5.15, and 3.10...
CVE-2020-25700
CVE-2020-25700 affects Moodle: database module web services allowed students to add entries in groups they did not belong to. Affected versions include Moodle 3.9.0–3.9.2, 3.8.0–3.8.5, 3.7.0–3.7.8, 3.5.0–3.5.14 and earlier unsupported releases. The issue is fixed in Moodle 3.8.6, 3.7.9, 3.5.15, a...
Security Bulletin: Lucky 13 Attack Vulnerability in IBM Cloud Pak for Data Streams
Summary The Lucky Thirteen attack is a crystallographic timing attack against implementations of the Transport Layer Security TLS protocol that use the CBC mode of operation. An attacker could perform man in the middle attacks to successfully obtain plain text from the secure channel. Vulnerabili...
Unbreakable Enterprise kernel security update
2.6.39-400.327.1 - USB: serial: omninet: fix reference leaks at open Johan Hovold Orabug: 30484765 CVE-2017-8925 - x8632, entry: Store badsys error code in %eax Sven Wegener Orabug: 30783266 CVE-2014-4508 CVE-2014-4508 - x8632, entry: Do syscall exit work on badsys CVE-2014-4508 Andy Lutomirski...
DEBIAN-CVE-2020-0452
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0452
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0452
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0452
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...
Security Bulletin: Vulnerabilities in Tivoli Netcool/OMNIbus
Summary There are vulnerabilities in the libnhttpd interface which is part of Tivoli Netcool/OMNIbus. This were discovered during penetration testing of the product. Vulnerability Details Third Party Entry: PSIRT-ADV0026226 DESCRIPTION: Created from Advisory: ADV0026226 CVSS Base score: 8.8 CVSS...
Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68048)
Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...
DEBIAN-CVE-2020-28241
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c...
UBUNTU-CVE-2020-0452
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...