Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerability in the Microprogramming Software of the Intel Converged Security and Manageability Engine CSME and the Microprogramming Software of the Intel Server Platform Services SPS is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an...

Hyper-V DoS

The vulnerability of the Hyper-V service in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause a service failure by transmitting specially crafted data...

Cisco Firepower Threat Defense SIP DoS

The vulnerability of the SIP protocol implementation in Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA lies in resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending SIP traffic...

Intel SSD Resource Release DoS

The vulnerability of Intel SSD microprogramming software is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

win32k Privilege Escalation

The vulnerability of the win32k component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Remote Desktop Service Privilege Escalation

The vulnerability of the remote desktop service for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

HEVC Video Extensions Code Execution

The vulnerability of the application for extending HEVC Video Extensions is related to errors in code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Remote Desktop Service Privilege Escalation

The vulnerability of the remote desktop service for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Remote Desktop Service Privilege Escalation

The vulnerability of the remote desktop service for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Inventory Component Magento Commerce Authentication Error

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores is related to authentication errors, which allow attackers to compromise the confidentiality and integrity of protected information using the HTTP network protocol...

Inventory Component Magento Commerce Authentication Error

The vulnerability of the Inventory component in the Magento Commerce software platform for developing and managing online stores is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

integration component of the

The vulnerability of the integration component of the Magento Commerce software for developing and managing online stores is related to authentication errors. Exploiting this vulnerability allows a malicious actor to delete CMS pages through the REST API without authentication...

Magento Commerce Integration Component Authentication Bypass Unauthorized Access Data Deletion

The vulnerability of the integration component of the Magento Commerce software for online store development and management is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and delete customer data throug...

Windows Information Representation Spear Phishing

The vulnerability of the Windows operating system is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

UBUNTU-CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in FireFox versions prior to FireFox 83, which stems from the fact that when listening for page changes using a mutation observer, a malicious web page may cause Firefox...

PT-2020-16581

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 83 Description A malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page when listening for page changes with a Mutation Observer. This would...

CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

OpenLDAP 安全漏洞

OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States. A denial of service vulnerability exists in OpenLDAP Certificate List Syntax, which can be exploited by an attacker to trigger a denial of service by...