CVE-2020-0443

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

CVE-2020-0443

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

glibc security, bug fix, and enhancement update

2.28-127.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

OPENSUSE-SU-2020:1841-1 Security update for tigervnc

This update for tigervnc fixes the following issues: - CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception bsc1176733 This update was imported from the...

Ability to switch customer email address on account detail page and stay verified

Impact The user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any...

IBM Cognos Analytics Denial of Service Vulnerability (CNVD-2020-57820)

IBM Cognos Analytics is a suite of business intelligence software from IBM USA that provides valuable information, secure data governance and reporting. A denial of service vulnerability exists in IBM Cognos Analytics version 11.0, 11.1. The vulnerability stems from a failure to catch an exceptio...

CVE-2020-26535

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation and read access violation...

CVE-2020-5387

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed...

PT-2020-18447 · Dell · Dell Xps 13 9370 Bios

Name of the Vulnerable Software and Affected Versions: Dell XPS 13 9370 BIOS versions prior to 1.13.1 Description: The issue is related to improper exception handling. A local attacker with physical access could exploit this to prevent the system from booting until the exploited boot device is...

PT-2022-8865 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: UPX affected versions not specified Description: A floating point exception issue was discovered in the PackLinuxElf64::invert pt dynamic function of the p lx elf.cpp file. An attacker with a crafted input file could trigger this issue, causi...

CVE-2020-5387

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed...

[SECURITY] Fedora 33 Update: mbedtls-2.16.8-1.fc33

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

The vulnerability of the Linux kernel driver of the Intel FPGA SDK for OpenCL utility package allows a hacker to cause a service failure.

The vulnerability of the Linux kernel driver of the Intel FPGA SDK for OpenCL utility package is related to insufficient testing of exception states. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Intel microprogramming software relates to insufficient testing of privileged states, allowing attackers to enhance their privileges, cause system failures, or gain access to protected information.

The vulnerability of Intel microprogramming software is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to enhance their privileges, cause system failures, or gain access to protected information...

[SECURITY] Fedora 32 Update: mbedtls-2.16.8-1.fc32

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack

A cross-site scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

PT-2020-6855 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw was found in OpenEXR's TiledInputFile functionality, allowing an attacker to trigger a floating-point exception error by submitting a crafted single-part non-image. This flaw is...

The vulnerability of the Linux operating system’s kernel Ethernet driver allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Linux operating system’s kernel Ethernet driver is related to improper exception handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Google Android Code Issues Vulnerabilities

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11. The vulnerability stems from an uncaught exception in the System UI that causes the system to crash. An attacker can use this vulnerability ...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c, resulting in a floating point exception via and allows an attacker to execute arbitrary code via a malicious WMV file...