11750 matches found
SUSE SLES12 Security Update : clamav (SUSE-SU-2021:1174-1)
This update for clamav fixes the following issues : CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 Fix errors when scanning files...
PT-2021-2691 · Microsoft · Azure Ad +1
Name of the Vulnerable Software and Affected Versions: Azure AD affected versions not specified Description: The issue is related to errors in security settings of the Microsoft Azure Active Directory cloud platform, which can be exploited to impact the confidentiality, integrity, and availabilit...
PT-2021-2639 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Event Tracing service, which can allow an attacker to gain unauthorized access to protected information. This...
Microsoft Azure DevOps Server 信息泄露漏洞
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. An information disclosure vulnerability exists in Azure DevOps Server and Team...
PT-2021-2685 · Microsoft · Office Word +1
Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in code generation management in Microsoft Word, allowing remote attackers to execute arbitrary code. This can be exploited to gain unauthorized access...
PT-2021-2620
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in privilege management within the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to elevate their...
PT-2021-2714 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code affected versions not specified Description: The issue is related to errors in code generation management in the Microsoft Visual Studio Code editor. Exploitation of this issue may allow an attacker to execute...
GitHub Security Lab: ihsinme: CPP Add query for CWE-570 detect and handle memory allocation errors.
This bug was reported directly to GitHub Security Lab...
The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN system allows a hacker to overwrite any files they desire.
The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN network is related to access control errors. Exploiting this vulnerability could allow a attacker to rewrite any files at will...
The vulnerability in the web interface for managing microprogrammed software routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows a hacker to bypass authentication checks and load arbitrary files.
The vulnerability of the web-based management interface for microprogrammed software routers RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P is related to control session errors on affected devices. Exploiting this vulnerability allows a malicious actor to bypass...
OpenIAM Access Control Error Vulnerability
OpenIAM is a fully integrated identity and access management platform. Vulnerabilities exist in OpenIAM versions prior to 4.2.0.3 due to access control errors in the "Create User", "Modify User Privileges" and "Password Reset" operations. No details of the vulnerabilities are available at this ti...
The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the security module of the Titan M operating system for Android, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Titan M security module’s Android operating system kernels is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability in the implementation of the TLS protocol by the OpenSSL library, which allows a attacker to cause a service failure
The vulnerability of the TLS protocol implementation in the OpenSSL library is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause a service failure by using a specially crafted “ClientHello” message...
The vulnerability of the get_old_root file in the fs/btrfs/ctree.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the getoldroot file in the fs/btrfs/ctree.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the security module of the Titan M operating system for Android, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Design/Logic Flaw
DISPUTED Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a...
The vulnerability of the GlobalProtect SSL VPN implementation in the PAN-OS operating system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the GlobalProtect SSL VPN implementation for the PAN-OS operating system is related to errors in the certificate authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...