The vulnerability of the Windows operating system, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows operating system is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

CVE-2020-4476

IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID:...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

November 10, 2020—KB4586805 (Security-only update)

None None...

PT-2020-4765 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to errors in privilege management within the Azure Sphere operating system. Exploitation of this issue may allow a remote attacker to elevate their privileges...

PT-2020-4684 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to...

PT-2020-4772 · Microsoft · Office Access Connectivity Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access Connectivity Engine affected versions not specified Description: The issue is related to errors in code generation management within the Microsoft Office Access Connectivity Engine component of the Microsoft Office...

ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI Interface Vulnerability: Numeric Errors 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker-controlled OPC XML-DA Server to respond with a...

PT-2020-4808 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Graphics Component. It may allow an attacker to disclose protected information. The...

PT-2020-4662 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to errors in code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

PT-2020-4796 · Microsoft · Windows Canonical Display Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Canonical Display Driver affected versions not specified Description: The issue is related to errors in processing objects in memory, which can allow an attacker to disclose protected information. This can potentially enable attackers...

PT-2020-4660 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to errors in code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

PT-2020-4770 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to errors in...

Citrix MSI Log Analyzer

Citrix MSI Log Analyzer v1.2.0.9 Created Date: Dec 04, 2017 Updated Date:May 29, 2019 To help us improve the tool, please send your feedback tohttps://podio.com/webforms/18778954/1263577. Please note: You can download the required file from the Citrix downloads website by visiting the following...

CVE-2020-4483

IBM UrbanCode Deploy UCD 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181857...

RUSTSEC-2020-0079 `socket2` invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

`socket2` invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

PT-2020-16343 · Teler · Teler

Name of the Vulnerable Software and Affected Versions: teler versions prior to 0.0.1 Description: The issue causes a denial-of-service SIGSEGV when teler is run inside a Docker container and encounters the errors.Exit function. This is because it doesn't get the process ID and process group ID of...

openSUSE: Security Advisory for salt (openSUSE-SU-2020:1833-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the command-line interface of the Cisco IOS XE operating system, which allows a hacker to execute commands with root privileges

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to errors that occur during the elimination of certain elements in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute commands with root privileges after the device...