The vulnerability of the software for general access to openstack-manila files, related to errors in using standard permissions, allows a perpetrator to gain unauthorized access to common files.

The vulnerability of the openstack-manila software for general access to files is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to common files, provided that the value of the UUID...

The vulnerability of the Cisco IOS XE operating system’s web interface, related to code errors, allows attackers to circumvent existing access restrictions.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerability of Huawei’s mobile phone microprogramming software, related to security mechanism errors, allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of Huawei’s mobile phone microprogramming software is related to security mechanism errors. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected data...

The vulnerability of the GSUP discapper of the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the GSUP scanner, a traffic analysis tool for computer networks developed by Wireshark, is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

HPSBHF03670 rev. 2 - Intel® Processors Data Leakage Advisory

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability involving cleanup errors in some data cache evictions in some Intel® Processors that may allow a...

Security update for axel (moderate)

openSUSE Security Update: Security update for axel Announcement ID: openSUSE-SU-2020:0778-1 Rating: moderate References: 1172159 Cross-References: CVE-2020-13614 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for axel fixes...

openSUSE Security Update : axel (openSUSE-2020-778)

This update for axel fixes the following issues : axel was updated to 2.17.8 : - CVE-2020-13614: SSL Certificate Hostnames were not verified boo1172159 - Replaced progressbar line clearing with terminal control sequence - Fixed parsing of Content-Disposition HTTP header - Fixed User-Agent HTTP...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are caused by synchronization errors when using a shared resource. This vulnerability allows attackers to circumvent existing security restrictions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are caused by synchronization errors when using a shared resource. Exploiting these...

SUSE-SU-2020:1530-1 Security update for libreoffice

This update for libreoffice to 6.4.4.2 fixes the following issues: Security issue fixed: - CVE-2020-12801: Fixed an issue with encrypted MSOffice documents that could be accidentally saved unencrypted bsc1171997. Non-security issues fixed: - Elements on title page mixed up bsc1160687. - Image...

The vulnerability of the FreeRDP remote desktop protocol, caused by indexing errors, allows a hacker to trigger a service failure or a client-side malfunction, resulting in the absence or distortion of sound.

The vulnerability of the FreeRDP remote desktop protocol is caused by indexing errors. Exploiting this vulnerability allows a malicious actor to cause service failures or malfunctions in the client-side component, resulting in the absence or distortion of audio signals...

CVE-2020-13227

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username under which the web server is running by triggering an invalid path permission error. This bypasses the fakepath protection mechanism...

The vulnerability of the disct_gssapi_work function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the disctgssapiwork function in the Wireshark network traffic analyzer program is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the Microsoft Spool Subsystem of the protocol discoverer, the Wireshark network traffic analyzer, allows a hacker to cause a service failure.

The vulnerability in the Microsoft Spool Subsystem of the Wireshark network traffic analyzer involves resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Windows operating system, related to errors in processing memory objects, allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Cybozu Kintone Mobile Information Disclosure Vulnerability

Cybozu Kintone Mobile is an office application for mobile platforms from Cybozu Japan. The program supports file uploading, editing records, and push notifications. An information disclosure vulnerability exists in Cybozu Kintone Mobile versions 1.0.0 through 2.5 for the Android-based platform. T...

Lenovo Printer LJ4010DN Input Validation Error Vulnerability (CNVD-2020-31083)

The Lenovo Printer LJ4010DN is a multifunction printer from the Chinese company Lenovo. A security vulnerability exists in the Lenovo Printer LJ4010DN using firmware versions prior to 1.01. A remote attacker can exploit the vulnerability by sending specially crafted packets to cause the printer t...

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems are caused by indexing errors that allow attackers to execute arbitrary code.

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are caused by indexing errors. Exploiting these vulnerabilities can allow a remote attacker ...

The vulnerability of the State Repository Service component of the Windows operating system allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the pivot_root function (fs/namespace.c) in Linux operating system kernels, which allows a hacker to trigger a service failure

The vulnerability of the pivotroot function fs/namespace.c in Linux operating system kernels arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2020-13649

parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...