The vulnerability in the driver/scsi/libsas/sas_discover.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/scsi/libsas/sasdiscover.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause a service failure due to incorrect handling of port shutdown during detection, which is relate...

The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Mcast Join...

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the BGP protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in Cisco IOS XR lies in errors in the processing of BGP messages. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially created Mcast Join...

DEBIAN-CVE-2020-0548

Cleanup errors in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

ALPINE-CVE-2020-0548

Cleanup errors in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-0549

Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

UBUNTU-CVE-2020-0548

Cleanup errors in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

The vulnerability of the HP Device Manager software for managing thin clients, related to code errors, allows an attacker to escalate their privileges, execute arbitrary code, or disclose sensitive information.

The vulnerability of the HP Device Manager software for managing thin clients is related to code errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or disclose sensitive information...

PHP 7.4.x < 7.4.2 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is prior to 7.2.27, 7.3.x prior to 7.3.14, or 7.4.x prior to 7.4.2. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow exists in mbflfiltconvbig5wchar due to an input validation error...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver drivers/usb/core/file.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/core/file.c file of the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2020-5217 Directive injection when using dynamic overrides with user input in RubyGems secure_headers

In Secure Headers RubyGem secureheaders, a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be us...

secure_headers directive injection using semicolon

If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be used to e.g. override a script-src directive. Duplicate directives are ignored and the first one wins. The directives in secureheaders...

The vulnerability of the Windows operating system update notification dispatcher allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system update notification dispatcher is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Red Hat JBoss Enterprise Application Platform Information Disclosure Vulnerability (CNVD-2020-03553)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source , J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. An information disclosure vulnerability exists in Red Hat JBo...

The vulnerability of the LZWDecode function in the LibTIFF library, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the LZWDecode function in the LibTIFF library is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created graphic file...

The vulnerability of the One Drive for Android app, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of the One Drive for Android app is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the rds_tcp_kill_sock() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the rdstcpkillsock function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...