CVE-2020-3759

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

Information disclosure

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3759

Adobe Digital Editions (Windows): CVE-2020-3759 is a buffer overflow (buffer errors) vulnerability in versions 4.5.10 and earlier that could disclose information; CVE-2020-3760 is a command-injection flaw in the same pre-4.5.11 range that could allow arbitrary code execution. The issues are addre...

CVE-2020-3759

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

Apache NiFi Information Disclosure Vulnerability (CNVD-2020-04924)

Apache NiFi is a data-flow based data processing and distribution system of the Apache Apache Software Foundation, USA. The system supports the configuration and transformation of data routing indicator maps and system intermediary logic. An information disclosure vulnerability exists in Apache...

Apache Superset Information Disclosure Vulnerability

Apache Superset is an enterprise-class business intelligence Web application from the Apache Apache Software Foundation in the United States. The program includes features such as mutual data visualization and enterprise-level authentication. An information disclosure vulnerability exists in Apac...

Adobe Addresses Critical Flash, Framemaker Flaws

Adobe has released patches addressing a wave of critical flaws in its Framemaker and Flash Player products, which, if exploited, could lead to arbitrary code-execution. Overall, Adobe stomped out flaws tied to 42 CVEs for its regularly scheduled February updates, with 35 of those flaws being...

Description of the security update for Excel 2016: February 11, 2020

Description of the security update for Excel 2016: February 11, 2020 Applies To Excel 2016 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not handle objects in memory correctly. To learn more about the...

Description of the security update for SharePoint Server 2019: February 11, 2020

Description of the security update for SharePoint Server 2019: February 11, 2020 Applies To SharePoint Server 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request ...

CVE-2014-0147

CVE-2014-0147 affects QEMU before 1.6.2, where a logic error with signed data types during QCOW2 snapshot creation (impacting QCOW2 and disk image formats used by Bochs) can cause a crash by incorrectly calling update_refcount(). Root cause is a signed data type/logical error in snapshot handling...

PT-2020-1675

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server. This vulnerability could allow a remote attacker to gain elevated privileges,...

PT-2020-1602

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory within the Windows Function Discovery service of Windows operating systems. It allows an attacker to potentially elevate their...

PT-2020-1695

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory by the tapisrv.dll library in the Windows operating system. Exploitation of this issue may allow an attacker to elevate their...

PT-2020-1722

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling memory objects in the Windows Cryptography Next Generation CNG service of Windows operating systems. It may allow an attacker to disclose protected...

ajaxArchiveFiles.php Command Execution

The vulnerability of the ajaxArchiveFiles.php component, a utility for managing the configuration of rConfig network devices, is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by sending...

Siemens Industrial Products SNMP (Update F)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2020-6016

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.021.20061 Adobe Reader versions prior to 2019.021.20061 Adobe Acrobat versions prior to 2017.011.30156 Adobe Reader versions prior to 2017.011.30156 Adobe Acrobat versions prior to 2015.006.30508 Adobe Read...

PT-2020-1623

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling attackers to impact it. Ther...

PT-2020-1632 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore scripting engine. This could allow a remote attacker to execute arbitrary code in the contex...

PT-2020-1658 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...