Windows Profile Service Unauthorized Access

The vulnerability of the Windows operating system’s profile service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Agent Activation Runtime Disclosure Protected Information

The vulnerability of the Agent Activation Runtime service in the Windows operating system exists due to object handling errors in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Website misconfigurations and other errors to avoid

Website owners, listen up: There are lots of things you shouldn’t do with your site, and many more you should avoid with the domains you’re responsible for. Insider malice, bad luck, and the stars aligning in impossible ways can all give your online portfolio a bad hair day. However, if you want ...

SUSE-SU-2020:1914-1 Security update for bind

This update for bind fixes the following issues: - Amended documentation referring to rule types 'krb5-subdomain' and 'ms-subdomain'. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. CVE-2018-5741 ...

WPA Protocol Implementation hostapd credential disclosure

The vulnerability of the WPA protocol implementation in the hostapd daemon software is related to security mechanism errors. Exploiting this vulnerability can allow a malicious actor to obtain user credentials remotely...

PT-2020-3446

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Session Border Controller versions 8.1.0 through 8.3.0 Description The issue is related to the File Upload component and can be exploited by a high-privileged attacker with network access via HTTP. Successful attacks require...

PT-2020-3160

Name of the Vulnerable Software and Affected Versions Windows Storage Services affected versions not specified Description The issue is related to errors in handling file operations, which can allow an attacker to elevate their privileges. This can impact the system, potentially allowing attacker...

PT-2020-3168

Name of the Vulnerable Software and Affected Versions Windows Credential Enrollment Manager affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Credential Enrollment Manager service. It occurs due to errors in handling objects in...

QEMU Media Transfer Protocol Heap Buffer Overflow DoS

The vulnerability of the usbmtpwritedata function in the Qemu Media Transfer Protocol implementation, within the QEMU hardware emulation software, arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure or...

Microsoft Windows Codecs Code Execution

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Squid Proxy Heap Buffer Overflow DoS

The vulnerability of the Ipc::Mem::PageStack::pop function in the Squid proxy server is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

OPENSUSE-SU-2020:0945-1 Security update for rust, rust-cbindgen

This update for rust, rust-cbindgen fixes the following issues: rust was updated for use by Firefox 76ESR. - Fixed miscompilations with rustc 1.43 that lead to LTO failures bsc1173202 Update to version 1.43.1 - Updated openssl-src to 1.1.1g for CVE-2020-1967. - Fixed the stabilization of AVX-512...

Red Hat Quay Information Disclosure Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. An information disclosure vulnerability exists in Red Hat Quay. The vulnerability stems from errors such as configuration during operation of a networked system or...

IBM Business Process Manager Access Control

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software relates to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Cisco AMP Clam Antivirus Synchronization File Deletion

The vulnerabilities of the Cisco AMP anti-virus protection tool and the Clam Antivirus antivirus tool are caused by synchronization errors when using a common resource. Exploiting these vulnerabilities can allow attackers to delete arbitrary files...

LibVNCServer DoS

The vulnerability of the libvncserver/translate.c component within the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

Mitsubishi Electric GOT2000 Series

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: GOT2000 Series Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation, NULL Pointer Dereference, Improper Access...

Exploit for Out-of-bounds Write in Php

This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the configuration is vulnerable. The exploit targets the "PHPVALUE" directive in the php.ini file, which...

Exploit for Out-of-bounds Write in Php

This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the configuration is vulnerable. The exploit targets the "shortopentag" and "htmlerrors" php.ini setting...

Spatial Data Windows Privilege Escalation

The vulnerability of the Spatial Data component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...