CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

Windows GDI+ Compromise Protected Information

The vulnerability of the Windows GDI+ component of the operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft Office Outlook 365 Apps Information Disclosure

The vulnerabilities of Microsoft Office, Microsoft Outlook, and Microsoft 365 apps are related to code errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information remotely...

Windows Code Execution

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft SharePoint Server Office Code Execution

The vulnerability of Microsoft SharePoint Server and Microsoft Office programs is related to code errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation packages is related to code errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Security Advisory - Resource Management Errors Vulnerability in Huawei Smartphone Product

There is a resource management errors vulnerability in Huawei smartphone product. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience. Vulnerability ID: HWPSIRT-2020-06101 This...

Windows SMB Access Disclosure

The vulnerability of the Windows SMB network protocol implementation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

Microsoft SharePoint Server Disclosure Information

The vulnerability of software packages in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation is related to code errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Cisco Data Center Network Manager Permission Bypass Info Disclosure

The vulnerability of the Cisco Data Center Network Manager system is related to errors in permission processing. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Windows Error Reporting Protected Information Access

The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Ansible Configuration Management Privilege Escalation

The vulnerability of the Ansible configuration management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

Istio Authentication Data Compromise

The vulnerability of the Istio network software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Junos DoS

The vulnerability of the Multiservices PIC Management Daemon mspmand implementation in the Junos operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to initiate an extended denial-of-service attack from a...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2300-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability a...

Cisco Video Surveillance 8000 Series IP camera DoS

The vulnerability of the Cisco Video Surveillance 8000 Series detection protocol lies in errors during the processing of detection protocol packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Cisco IOS Command Syntax Analyzer Access Disclosure

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Envoy Authentication Information Disclosure

The vulnerability of the network software tool Envoy is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

tika-core: Denial of Service Vulnerabilities in Some of Apache Tika's Parsers

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...