11753 matches found
docker-cli docker-engine security update
docker-cli 19.03.11-4 - added patch for registry list 19.03.11-3 - update to 19.03.11 for CVE-2020-13401 19.03.1-1.0.0 - update to 19.03.1 19.03-0.0.1 - update to 19.03 18.09.1-1.0.6 - disable kmem accounting for UEKR4 18.09.1-1.0.5 - apply e4931e664feac6fa8846f3f04268a0cc98822549, fixes...
CVE-2020-9489
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...
The vulnerability of the Windows Runtime component of the Windows operating system allows attackers to elevate their privileges and execute arbitrary code.
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...
Mutt and NeoMutt Injection Vulnerabilities
Mutt is a text-based mail client for Unix-like systems by Michael Elkins Software Developers.NeoMutt is a command-line mail reader. An injection vulnerability exists in Mutt versions prior to 1.14.4 and NeoMutt versions prior to 2020-06-19. The vulnerability stems from a lack of proper validation...
Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.
The vulnerability of the Connected User Experience and Telemetry Service services of Microsoft Windows lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...
The vulnerability of the Windows Runtime component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Microsoft Server Message Block 3.1.1 (SMBv3) network protocol in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Microsoft Server Message Block 3.1.1 SMBv3 network protocol implementation in Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the init_tmp function (TeeJee.FileSystem.vala) in the Timeshift system recovery application, which allows a hacker to execute arbitrary code.
The vulnerability of the inittmp function TeeJee.FileSystem.vala in the Timeshift system recovery application is caused by synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Windows Runtime component of the Windows operating system allows attackers to elevate their privileges and execute arbitrary code.
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...
The vulnerability of the SAP Business Objects Business Intelligence Platform, related to errors in code generation, allows a perpetrator to execute arbitrary code.
The vulnerability of the SAP Business Objects Business Intelligence Platform is related to errors in code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...
The vulnerability of the store_data_buffer function in the ImageGear image processing library allows a hacker to execute arbitrary code.
The vulnerability of the storedatabuffer function in the ImageGear image processing library is related to conversion errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malicious PNG file...
The vulnerability of the 389 Directory Server catalog service server arises from synchronization errors when using a shared resource, allowing a malicious actor to cause a service failure.
The vulnerability of the 389 Directory Server catalog service server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...
Updated ruby-RubyGems packages fix security vulnerability
Updated ruby-RubyGems package fixes security vulnerabilities The following vulnerabilities have been reported. CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in verbose CVE-2019-8322: Escape sequence injection...
Information Disclosure
microcodectl is vulnerable to information disclosure. An authenticated user is able to obtain confidential information via local access due to cleanup errors...
The vulnerability of the epan/dissectors/packet-ieee80211.c component of the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the epan/dissectors/packet-ieee80211.c component of the Wireshark network traffic analyzer is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Cisco Unified Contact Center Express automation software, related to authentication errors, allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Unified Contact Center Express operator automation software is related to authentication errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework allows a attacker to execute a “man-in-the-middle” attack.
The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...