PT-2020-4320 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...

IBM Cúram Social Program Management Code Issue Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. IBM Cúram Social Program Management suffers from a code issue vulnerability that arises from errors such as configuratio...

Security update for nextcloud (moderate)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2020:1652-1 Rating: moderate References: 1171572 1171579 1177346 Cross-References: CVE-2020-8154 CVE-2020-8155 CVE-2020-8183 CVE-2020-8228 CVE-2020-8233 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1...

kernel security and bug fix update

2.6.32-754.35.1.OL6 - Update genkey bug 25599697 2.6.32-754.35.1 - ata libata: fix NULL sdev dereference race in atapiqccomplete Kenneth Yin 1876296 2.6.32-754.34.1 - mm mm: prevent getuserpages from overflowing page refcount Aristeu Rozanski 1705003 - mm mm/hugetlb.c: getuserpages ignores certai...

Windows Storage Services Privilege Escalation

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

ASP.NET Core Cookie Analyzer Bypass

The vulnerability of the ASP.NET Core software platform’s cookie analyzer is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to bypass security measures...

JunOS RPD Maintenance Failure

The vulnerability of the RPD daemon in the JunOS operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Windows Privilege Escalation

The vulnerability of the Windows operating system’s function detection service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Qualcomm AVT Driver Pointer Swapping Unauthorized Access

The vulnerability of Qualcomm’s AVT driver is related to errors in pointer assignment. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Audiodriver Windows Media Player RCE

The vulnerability of Audiodriver in Windows Media Player on the Windows operating system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Audiodriver Windows Media Player RCE

The vulnerability of Audiodriver in Windows Media Player on the Windows operating system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cryptographic Services Privilege Escalation

The vulnerability of the Windows Cryptographic Services is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2020-5076

Name of the Vulnerable Software and Affected Versions Cisco Webex Teams for Windows affected versions not specified Description The issue is related to errors in handling directory paths, which can be exploited by an attacker to load a malicious library. This can occur when a malicious DLL file i...

D-Bus Synchronization Error DoS

The vulnerability of the D-Bus inter-process communication system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure due to the absence of a function for checking the “ActivationFailure” signal source...

Qualcomm kernel function kgsl_mem_entryDestroy Use-After-Free

The vulnerability of the kernel function kgslmementrydestroy drivers/gpu/msm/kgsl.c in Qualcomm software is caused by synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause the kernel code to terminate emergently...

mod_dav_svn svnserve DoS

The vulnerability of server processes moddavsvn and svnserve in a centralized version control system like Subversion is related to resource management errors. Exploiting this vulnerability allows an attacker to cause service failures when processing parameter combinations that depend on revision...

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...