secure_headers directive injection using semicolon

If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be used to e.g. override a script-src directive. Duplicate directives are ignored and the first one wins. The directives in secureheaders...

The vulnerability of the Windows operating system update notification dispatcher allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system update notification dispatcher is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Red Hat JBoss Enterprise Application Platform Information Disclosure Vulnerability (CNVD-2020-03553)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source , J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. An information disclosure vulnerability exists in Red Hat JBo...

The vulnerability of the LZWDecode function in the LibTIFF library, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the LZWDecode function in the LibTIFF library is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created graphic file...

The vulnerability of the Remote Desktop Web Access service in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Remote Desktop Web Access service in Windows operating systems with authentication processing errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the rds_tcp_kill_sock() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the rdstcpkillsock function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the One Drive for Android app, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of the One Drive for Android app is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Windows operating systems, related to errors in handling hard links, allows a perpetrator to trigger a service failure.

The vulnerability of Windows operating systems is related to errors in handling hard links. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ASP.NET Core software platform, related to errors in request processing, allows a hacker to cause a service failure.

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending specially crafted requests to the ASP.NET Core application...

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-7231

Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid...

Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)

Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...

CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

Code injection

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...