11755 matches found
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser allows a hacker to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the CDPSvc service of the Windows operating system, which allows a hacker to escalate their privileges
The vulnerability of the CDPSvc service for connected user devices in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information
The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser allows a hacker to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information
The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
Vulnerability of the Apache Jserv Protocol – the connection protocol of Apache Tomcat servers, allowing attackers to execute arbitrary code.
The vulnerability of the Apache Jserv Protocol – the server for Apache Tomcat applications – is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information
The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of Huawei USG6330 network firewall allows a intruder to trigger a service failure.
The vulnerability of the Huawei USG6330 network firewall is related to errors in processing network packets. Exploiting this vulnerability can allow a remote attacker to exhaust the available memory and cause the device to reboot...
CVE-2020-10101
An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process...
CVE-2020-10101
An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process...
Format string
An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process...
CVE-2020-10101
CVE-2020-10101 affects Zammad 3.0–3.2 where the WebSocket server crashes when non‑JSON messages are sent. The root cause is inadequate validation of message format and unhandled parsing errors, causing a service process crash. Public details in the connected sources reiterate the same description...
CVE-2020-10101
An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process...
The vulnerability of the STARTTLS component of the Keycloak identity and access management software lies in implementation errors related to authentication procedures. This allows attackers to escalate their privileges.
The vulnerability of the STARTTLS component of the Keycloak identity and access management software is related to implementation errors in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of the SAP NetWeaver software integration platform’s keystore service allows attackers to disclose protected information.
The vulnerability of the SAP NetWeaver software integration platform’s keystore service is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Keycloak identity and access management software lies in implementation errors related to authentication procedures, which allow attackers to escalate their privileges.
The vulnerability of the Keycloak identity and access management software is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow unauthorized actors to gain increased privileges...
The vulnerability of the SynTP.sys driver for Synaptics Touchpads allows a hacker to gain unauthorized access to protected information.
The vulnerability of the SynTP.sys driver for Synaptics Touchpads is related to errors in handling API requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Intel NVMe and Intel RSTe driver installers is related to privilege management errors, allowing attackers to elevate their privileges.
The vulnerability of Intel NVMe and Intel RSTe driver installers is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
SharePoint Workflows XOML Injection
This module exploits a vulnerability within SharePoint and its .NET backend that allows an attacker to execute commands using specially crafted XOML data sent to SharePoint via the Workflows functionality. Module Options msf use exploit/windows/http/sharepoint/workflowsxoml msf...
OPENSUSE-SU-2020:0261-1 Security update for python-azure-agent
This update for python-azure-agent fixes the following issues: python-azure-agent was updated to version 2.2.45 jscECO-80 + Add support for Gen2 VM resource disks + Use alternate systemd detection + Fix /proc/net/route requirement that causes errors on FreeBSD + Add cloud-init auto-detect to...