13554 matches found
PYSEC-2020-317
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...
CVE-2020-15223
In ORY Fosite the security first OAuth2 & OpenID Connect framework for Go before version 0.34.0, the TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can...
CVE-2020-15223 Ignored storage errors on token revokation in ORY Fosite
In ORY Fosite the security first OAuth2 & OpenID Connect framework for Go before version 0.34.0, the TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can...
PT-2020-4430 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...
PT-2020-5089 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...
Intel Graphics Driver Resource Release DoS
The vulnerability of Intel Graphics Drivers’ drivers is related to resource release errors. Exploiting this vulnerability can allow a hacker to cause service failures...
Microsoft Office Online Server Memory Object Processing Code Execution
The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
MAX 10 FPGA Unauthorized Access
The vulnerability of the MAX 10 FPGA programmable logic circuit lies in configuration errors in its design. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
Windows Storage Services Privilege Escalation
The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Microsoft Dynamics 365 for Finance and Operations Code Execution
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to processing errors with input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Word Memory Object Handling Code Execution
The vulnerability of Microsoft Word editing software is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Office Excel Information Disclosure
The vulnerability of Microsoft Office and Microsoft Excel packages is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document file...
Microsoft Windows Codecs Library Code Execution
The vulnerability of the Microsoft Windows Codecs Library, used for processing media content, in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component of the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
splwow64.exe Privilege Escalation
The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
Active Directory Federation Services Spoofing
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to carry out spear-phishing attacks remotely...
Active Directory Integrated DNS Code Execution
The vulnerability of the Active Directory Integrated DNS ADIDNS component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Windows Kernel Memory Access Disclosure
The vulnerability of the object processing function in the kernel memory of the Windows operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...
Windows Defender Application Control Code Execution
The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to errors during command validation. Exploiting this vulnerability allows an attacker to execute arbitrary code...
splwow64.exe Unauthorized Access
The vulnerability of the executable file splwow64.exe in Microsoft Windows operating systems is related to errors in call handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...