CVE-2019-15924

A flaw was found in the way the fm10k driver in the Linux kernel reacted to memory-related errors during driver initialization. This flaw allows a local attacker to cause a denial of service and crash the system. Mitigation To mitigate this issue, prevent module fm10k from being loaded. Please se...

Apple Mac OS X Security Update (HT211170) - 01

Apple Mac OS X is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei Data Communication: Numeric Errors Vulnerability in Some Huawei Routers (huawei-sa-20171215-01-router)

Some Huawei routers have a numeric error vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

The vulnerability of the LibreOffice office software package, related to errors in information encryption, allows a perpetrator to gain access to protected information.

The vulnerability of the LibreOffice office software package is related to errors in information encryption. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the Windows Runtime component of the Windows operating system allows a perpetrator to increase their privileges or execute arbitrary code.

The vulnerability of the Windows Runtime component of the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code using a specially created application...

The vulnerability of the State Repository Service component of the Windows operating system allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Vulnerability of Microsoft Graphics Components of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows Jet Database Engine component of the operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the sub-component Federation of the Oracle Access Manager software component of the Oracle Fusion Middleware, which allows a perpetrator to cause a partial service disruption.

The vulnerability of the Federation sub-component of the Oracle Access Manager software component within the Oracle Fusion Middleware platform is related to resource release errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through...

OPENSUSE-SU-2020:0682-1 Security update for openexr

This update for openexr provides the following fix: Security issues fixed: - CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier bsc1169575. - CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp...

The vulnerability of the Microsoft Windows Graphics component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Windows Graphics subsystem in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the evaluation tool allows an attacker to exploit privileges on Windows System Assessment Tool (WinSAT) running on Windows operating systems.

The vulnerability of the System Assessment Tool WinSAT for evaluating functions and capabilities of Windows operating systems is related to errors in file handling operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the mmget_not_zero()/get_task_mm() components in the Linux operating system allows a hacker to disclose sensitive information or cause system failures.

The vulnerability of the mmgetnotzero/gettaskmm components in the Linux operating system stems from synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Push Notification Service allows a perpetrator to escalate their privileges on Windows operating systems.

The vulnerability of the Windows Push Notification Service is related to errors in memory object handling on Windows operating systems. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Verizon DBIR: Web App Attacks and Security Errors Surge

Verizon’s 2020 Data Breach Investigations Report DBIR, released Tuesday, analyzed 32,002 security incidents and 3,950 data breaches to sniff out the top causes of data breaches over the past year. While cyber-espionage attacks and malware decreased, other trends, such as security “errors” cloud...

When Bandwidth Doesn’t Last

Introduction Imperva’s Cloud WAF networking team went through a major transition from an operation team to a development team during the SDN era. We saw new products emerging for our network infrastructure - moving from manual operation to automatic. But, while the change of mindset from being an...

Verizon Data Breach Report: DoS Skyrockets, Espionage Dips

Denial-of-service DoS attacks have spiked over the past year, while cyber-espionage campaigns have spiraled downwards. That’s according to Verizon’s 2020 Data Breach Investigations Report DBIR released Tuesday, which analyzed 32,002 security incidents and 3,950 data breaches across 16 industry...

The vulnerability of the Windows Push Notification Service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Push Notification Service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...