Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists through memory errors...

The vulnerability of the Apache NetBeans application environment update system, related to errors in the certificate validation process, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Apache NetBeans application environment update system is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the JunOS operating system, related to synchronization errors when using shared resources, allows a hacker to alter the device’s configuration.

The vulnerability of the JunOS operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to modify the device’s configuration...

kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c

A flaw was found in the Linux kernel's mwifiex driver implementation when connecting to other WiFi devices in "Test Mode." A kernel memory leak can occur if an error condition is met during the parameter negotiation. This issue can lead to a denial of service if multiple error conditions meeting...

Vulnerabilities of operating systems such as iOS, iPadOS, tvOS, watchOS, Safari browser, and the multimedia player iTunes for Windows operating systems, as well as the iCloud service for Windows operating systems, are related to data type conversion errors, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as iOS, iPadOS, tvOS, watchOS, Safari browser, and the multimedia player iTunes for Windows operating systems, as well as the iCloud service for Windows operating systems, are related to data type conversion errors. Exploiting these vulnerabilities can...

The vulnerability of the Windows operating system’s routing utility, which allows a hacker to trigger a service failure

The vulnerability of the Windows operating system’s routing utilities is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created application...

The vulnerability of the Jet Database Engine database driver for the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine database driver for the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the SQL Server Reporting Services reporting system’s server-side components, related to errors in processing input data, allows attackers to upload files with invalid types.

The vulnerability of the SQL Server Reporting Services reporting system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to remotely upload files with invalid types...

The vulnerability of the Windows Language Pack Installer component on Windows operating systems allows a malicious individual to execute processes under privileged access.

The vulnerability of the Windows Language Pack Installer component in Windows operating systems is related to file operation errors. Exploiting this vulnerability can allow an attacker to execute processes in privileged mode using a specially created application...

The vulnerability of the fdSSDP.dll library in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the fdSSDP.dll library on Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

PYSEC-2020-317

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

CVE-2020-15223

In ORY Fosite the security first OAuth2 & OpenID Connect framework for Go before version 0.34.0, the TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can...

CVE-2020-15223 Ignored storage errors on token revokation in ORY Fosite

In ORY Fosite the security first OAuth2 & OpenID Connect framework for Go before version 0.34.0, the TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can...

PT-2020-4430 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...

The vulnerabilities of the MAX 10 FPGA programmable logic circuit, related to configuration errors in its design, allow attackers to gain unauthorized access to protected information.

The vulnerability of the MAX 10 FPGA programmable logic circuit lies in configuration errors in its design. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

PT-2020-5089 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...

The vulnerability of Intel Graphics Driver drivers, related to resource release errors, allows attackers to cause service failures.

The vulnerability of Intel Graphics Drivers’ drivers is related to resource release errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server lies in memory object processing errors, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the assert() function in the atftpd server, related to resource release errors, allows a violator to trigger a service failure.

The vulnerability of the assert function in the atftpd server is related to resource release errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures through a specially crafted sequence of RRQ-Multicast requests...

The vulnerability of the executable file splwow64.exe on Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the executable file splwow64.exe in Microsoft Windows operating systems is related to errors in call handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...