PT-2020-5234 · Microsoft · Windows Overlay Filter +1

Name of the Vulnerable Software and Affected Versions: Windows Overlay Filter affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Overlay Filter component. This can allow an attacker to impact the confidentiality, integrit...

KTS Mayak ProcessReportGetter File Read

The vulnerability of the /processReportGetter.php component of the KTS “Mayak” is related to errors in the logic of the web application’s operation. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to and read arbitrary files...

PT-2020-17555

Name of the Vulnerable Software and Affected Versions ordered-float crate versions prior to 1.1.1 ordered-float crate versions 2.x prior to 2.0.1 Description An issue was discovered where a NotNan value can contain a NaN after using assignment operators such as NotNan::add assign or NotNan::mul...

TwinCAT Privilege Escalation

The vulnerability of the default installation configuration of TwinCAT software for automation and process control systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

Linux kmem_cache_alloc_bulk Heap Buffer Overflow DoS

The vulnerability of the kmemcacheallocbulk function in the mm/slub.c file of Linux operating system kernels is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to cause service failures...

Windows Camera Codec Pack Code Execution

The vulnerability of the Windows Camera Codec Pack software suite on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Intel Advisor Installer Privilege Escalation

The vulnerability of the tool for collecting metrics and traces of Intel Advisor tools is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Graphics Components Code Execution

The vulnerability of Microsoft Graphics Components in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Cisco IOS XR DoS

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco Adaptive Security Appliance SSL/TLS DoS

The vulnerability of the SSL/TLS module of the Cisco Adaptive Security Appliance software lies in errors during initialization of pointers. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Red Hat WildFly Information Disclosure Vulnerability (CNVD-2020-67088)

Red Hat Wildfly is the United States Red Hat Red Hat, Inc. of a lightweight JavaEE-based open source application server . An information disclosure vulnerability exists in versions prior to WildFly 21.0.0, which stems from a resource adapter logging plain-text JMS passwords at the warning level a...

Microsoft SharePoint Server Disclosure of Information

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in displaying certain web pages. Exploiting this vulnerability can allow an attacker to disclose protected information...

Junos MX Series Synchronization Error

The vulnerability of Junos operating system’s MX series routers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Azure Sphere MTD Driver Code Execution

The vulnerability of the Azure Sphere operating system’s driver relates to errors in code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft SharePoint Server Memory Object Disclosure

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

OPENSUSE-SU-2020:2022-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.4.2 MFSA 2020-49 bsc1178611 CVE-2020-26950 bmo1675905 Write side effects in MCallGetProperty opcode not accounted for - Mozilla Thunderbird 78.4.1 new: Thunderbird prompts for an address to use when starting a...

ADM - Failed to allocate requested capacity for MPX/SDX or VPX to create in SDX

When multiple pool of licenses Bandwidth/instance are purchased at different points in time, the Service agreement SA date and expiration date are different, causing each pool of licenses to be recognized as separate on Citrix ADM, instead of one combined pool of licenses. This sometimes may caus...

Business Logic Errors in braitsch/node-login

Description node-login is a template for quickly building login systems on top of Node.js & MongoDB. The business logic which updates account details fails to verify if the provied email is associated with another account. Proof of Concept 1. Navigate to /signup and Create two accounts with data...

Red Hat Wildfly log information leakage vulnerability

Red Hat Wildfly is the United States Red Hat Red Hat, Inc. of a lightweight JavaEE-based open source application server . An information disclosure vulnerability exists in versions prior to WildFly 21.0.0, which stems from a resource adapter logging plain-text JMS passwords at the warning level a...

Azure Sphere Privilege Escalation

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...