13305 matches found
CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
The vulnerability of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps packages lies in coding errors, which allow attackers to exploit them to disclose protected information.
The vulnerabilities of Microsoft Office, Microsoft Outlook, and Microsoft 365 apps are related to code errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information remotely...
The vulnerability of the Windows GDI+ component of the Windows operating system, which allows a hacker to compromise protected information
The vulnerability of the Windows GDI+ component of the operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Microsoft SharePoint Server and Microsoft Office software lies in code errors, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server and Microsoft Office programs is related to code errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation software lies in code errors that allow an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation packages is related to code errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Security Advisory - Resource Management Errors Vulnerability in Huawei Smartphone Product
There is a resource management errors vulnerability in Huawei smartphone product. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience. Vulnerability ID: HWPSIRT-2020-06101 This...
The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to gain access to protected information.
The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation software lies in code errors that allow attackers to disclose protected information.
The vulnerability of software packages in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation is related to code errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Cisco Data Center Network Manager system, related to errors in permission processing, allows a intruder to gain access to protected information.
The vulnerability of the Cisco Data Center Network Manager system is related to errors in permission processing. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability in the implementation of the Windows SMB network protocol allows attackers to gain access to protected information.
The vulnerability of the Windows SMB network protocol implementation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...
The vulnerability of the Istio network software, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Istio network software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Ansible configuration management system, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the Ansible configuration management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...
The vulnerability of the Junos operating system arises from synchronization errors when using shared resources, allowing a attacker to trigger an extended denial-of-service attack.
The vulnerability of the Multiservices PIC Management Daemon mspmand implementation in the Junos operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to initiate an extended denial-of-service attack from a...
Security update for gcc7 (moderate)
openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2300-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability a...
The vulnerability of the network software tool Envoy, related to authentication errors, allows a hacker to gain access to protected information.
The vulnerability of the network software tool Envoy is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...
The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems allows a attacker to gain access to protected information.
The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of the implementation of the Cisco Video Surveillance 8000 Series IP camera protocol allows a intruder to trigger a service failure.
The vulnerability of the Cisco Video Surveillance 8000 Series detection protocol lies in errors during the processing of detection protocol packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
tika-core: Denial of Service Vulnerabilities in Some of Apache Tika's Parsers
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...