Debian DSA-4714-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2020-6423 A use-after-free issue was found in the audio implementation. - CVE-2020-6430 Avihay Cohen discovered a type confusion issue in the v8 JavaScript library. - CVE-2020-6431 Luan Herrera discovered a policy...

CVE-2020-15478

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

CVE-2020-15478

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

CVE-2020-15478

CVE-2020-15478 affects the Journal theme for OpenCart prior to 3.1.0. The vulnerability allows exposure of sensitive data through errors surface when handling SQL in the page parameter (the exact root cause described across sources indicates improper handling that leads to data exposure). Affecte...

CVE-2020-15478

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

CVE-2020-15478: Generation of Error Message Containing Sensitive Information

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

PT-2020-14445

Name of the Vulnerable Software and Affected Versions OpenCart Journal theme versions prior to 3.1.0 Description The issue allows exposure of sensitive data via SQL errors. Recommendations For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue...

EulerOS Virtualization 3.0.6.0 : edk (EulerOS-SA-2020-1791)

According to the versions of the edk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by...

PT-2020-3001 · Microsoft · Windows Codecs Library

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: A remote code execution issue exists due to errors in handling objects in memory. This can be exploited by an attacker to execute arbitrary code using a specially...

update service for Cisco Code Execution

The vulnerability of the software update service for the Cisco Webex Meetings Desktop App on Mac operating systems is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created website...

Microsoft Store Runtime Privilege Escalation

The vulnerability of the Microsoft Store Runtime operating system for Microsoft Windows involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Cisco ASR 920 SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP implementation in the microsoftware for Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM is related to data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

IIS Privilege Escalation

The vulnerability of the Microsoft Internet Information Server IIS server, due to the Windows Background Intelligent Transfer Service BITS, affects operating systems running on Windows. This vulnerability is related to file operation processing errors. Exploiting this vulnerability can allow an...

Cisco Identity Services Engine DoS

The vulnerability of the system log processing mechanism of the Cisco Identity Services Engine ISE management platform is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux kernel rx_queue_add_kobject netdev_queue_add_kobject Data Compromise

The vulnerability of the functions rxqueueaddkobject and netdevqueueaddkobject net/core/net-sysfs.c in the Linux kernel is related to errors in pointer counting in the networking subsystem. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Error "Failed to establish connection to Amazon S3 endpoint" or "Azure Cloud connection has returned an untrusted certificate."

Challenge When attempting to add an Object Storage Repository or use an existing Object Storage Repository the following errors occur: Connection to Amazon S3 object storage fails with the following error: Failed to load Amazon S3 Compatible configuration: Failed to establish connection to Amazon...

DirectX Windows Privilege Exploitation

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

VBScript Script Handler Code Execution

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VBScript Script Handler Code Execution

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

LibreOffice OpenOffice.org DoS

The vulnerability of many components of the OpenOffice.org module of the LibreOffice office software package is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...