11752 matches found
Mozilla: Potential leak of redirect targets when loading scripts in a worker
The Mozilla Foundation Security Advisory describes this flaw as: By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script...
GHSA-XW5P-HW6R-2J98 Denial of service in fastify
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion when the allErrors option is used with specially crafted schemas...
Low: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.31 bug fix update
Red Hat OpenShift Container Platform release 4.3.31 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...
The vulnerability of the fly-fm file manager, related to errors in saving permissions, allows a violator to gain access to confidential data.
The vulnerability of the fly-fm file manager is related to errors during permission saving. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
DLInjector-GUI - DLL Injector Graphical User Interface
DLInjector for Graphical User Interface. Faster DLL Injector for processes. It targets the process name to identify the target. The process does not need to be open to define the target. DLInjector waits until the process executed. USAGE DLInjector usage a very simple. Firstly, enter the target...
USN-4298-2 sqlite3 vulnerabilities
USN-4298-1 fixed several vulnerabilities in SQLite. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting in a...
The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created image file...
The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created image file...
Mozilla: Potential leak of redirect targets when loading scripts in a worker
The Mozilla Foundation Security Advisory describes this flaw as: By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script...
The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing attackers to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to object handling errors in memory. Exploiting thes...
The vulnerability of the Windows Runtime component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
UBUNTU-CVE-2020-15652
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox 79, Firefox ESR 68.11, Firefox ESR 78.1, Thunderbird 68.11, and Thunderbi...
The vulnerability of the Windows Runtime component of the Windows operating system allows attackers to elevate their privileges and execute arbitrary code.
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute malicious code through a specially created application...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in information representation errors in the user interface, which allows attackers to execute cross-site scripting attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Security Vulnerabilities fixed in Firefox ESR 68.11 — Mozilla
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. WebRTC used the memory address of a class instance as a connection identifier. Unfortunately, this value is...
Adobe Creative Cloud Security Update (APSB20-33) - Windows
Adobe Creative cloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:creativecloud";...
QtNetwork: Denial of service
Background QtNetwork provides a set of APIs for programming applications that use TCP/IP. It is part of the Qt framework. Description A flaw was discovered in QtNetwork’s handling of OpenSSL protocol errors. Impact An attacker could cause a possible Denial of Service condition. Workaround There i...
The vulnerability of the MpSigStub.exe executable of Microsoft Windows Defender allows a hacker to delete files in certain parts of the file system.
The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...
The vulnerability of the Windows Lockscreen component allows attackers to elevate their privileges.
The vulnerability of the Windows Lockscreen component in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...