Virtual COM Port Driver Privilege Escalation

The vulnerability of the Virtual COM Port Driver VSPD of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to...

Windows iSCSI Target Privilege Escalation

The vulnerability of the Windows iSCSI Target service in the Windows operating system is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Camera Codec Pack Windows Code Execution

The vulnerability of the Camera Codec Pack component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

win32k Privilege Escalation

The vulnerability of the win32k component of the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Intel processor BIOS Resource Management Error

The vulnerability of Intel processor BIOS microprogramming software is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system’s operation...

Intel processor BIOS Privilege Management Error

The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Unable to access internal Websites with Android Secure Web using MAM SDK

On Android Secure Web with MAM SDK, accessing internal websites shows error 'ERREMPTYRESPONSE'. Further checking the logs, we see that Secure Web does not tunnel the connection to AG for internal websites. But for Legacy SDK, it works fine. Split Tunne - ON DNS suffixes - ADDED In the logs, we se...

PT-2020-4422

Name of the Vulnerable Software and Affected Versions: Oracle REST Data Services versions 11.2.0.4 through 19c Standalone ORDS versions prior to 20.2.1 Description: The issue is related to security mechanism errors in the General component of Oracle REST Data Services. It allows a low-privileged...

USN-4587-1 italc vulnerabilities

Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these issues to cause a denial of service or possibly execute arbitrary code. CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055...

Windows COM Server Privilege Escalation

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

KB2793634 - Windows Installer starts repeatedly after you install SQL Server 2012 SP1

KB2793634 - Windows Installer starts repeatedly after you install SQL Server 2012 SP1 Symptoms After you install SQL Server 2012 SP1 on a computer, the Windows Installer Msiexec.exe process is repeatedly started to repair certain assemblies. Additionally, the following events are logged in the...

Windows Enterprise Application Management Service Unauthorized Access

The vulnerability of the Windows Enterprise application management service is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Ubuntu 16.04 LTS : iTALC vulnerabilities (USN-4587-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4587-1 advisory. Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these...

CVE-2020-15652

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox 79, Firefox ESR 68.11, Firefox ESR 78.1, Thunderbird 68.11, and Thunderbi...

NetBIOS Unauthorized Access

The vulnerability of the NetBIOS protocol implementation in Windows operating systems is related to errors in object memory handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Intel Data Center SSD Data Flow Management Unauthorized Access

The vulnerability of Intel Data Center SSDs’ microprogrammed software is related to errors in data flow management. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

PT-2020-4393 · Microsoft · Dynamics 365 Commerce

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Commerce affected versions not specified Description: The issue is related to authorization errors in Microsoft Dynamics 365 Commerce, allowing a remote attacker to elevate their privileges. An unauthenticated attacker...

PT-2020-4321 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...