COVIDSafe app information disclosure vulnerability (CNVD-2020-30664)

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Windows DNS Service DoS

The vulnerability of the Windows DNS service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted DNS requests...

Cisco Adaptive Security Appliance Kerberos Protocol Data Compromise

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

Windows Push Notification Service Unauthorized Access

The vulnerability of the Windows Push Notification Service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Microsoft Windows Graphics Unauthenticated Access

The vulnerability of the Microsoft Windows Graphics subsystem in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Microsoft Windows Graphics Unauthorized Access

The vulnerability of the Microsoft Windows Graphics subsystem in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Linux kernel mptctl_ioctl Buffer Overflow

The vulnerability of the mptctlioctl function drivers/message/fusion/mptctl.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Media Foundation Unauthorized Access

The vulnerability of the multimedia framework Media Foundation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Remote Access Common Dialog Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability an attacker would need to physically...

PT-2020-2360

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory, which can be exploited to potentially allow an attacker to elevate their privileges or execute arbitrary code using a specially...

PT-2020-2364

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited to potentially elevate privileges or execute arbitrary code using a specially crafted application. This ca...

PT-2020-2728

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to a security bypass...

PT-2020-2840

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...

PT-2020-2356

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. It may allow an attacker to execute arbitrary code using a...

PT-2020-2714

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader versions 2015.006.30518 and earlier Description The issue is related to a security bypass...

PT-2020-2366

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited to elevate privileges or gain access to modify, add, or delete data. This can allow attackers to affect th...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-654)

This update for cacti, cacti-spine fixes the following issues : cacti-spine and cacti were updated to 1.2.12 : cacti fixes : - CVE-2020-7106: Lack of escaping of color items can lead to XSS exposure boo1163749 - Fix multiple graphing bugs and web UI issues - Fix multiple warnings, PHP Exceptions...

FreeBSD : qutebrowser -- Reloading page with certificate errors shows a green URL (452d16bb-920d-11ea-9d20-18a6f7016652)

Qutebrowser developers report : After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the URL was mistakenly displayed as green colors.statusbar.url.successhttps...