4568 matches found
DEBIAN-CVE-2019-11252
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes...
VM-Series Network Interface Card Information Disclosure
The vulnerability of the VM-Series network firewalls is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...
SAP NetWeaver DoS
The vulnerability of the SAP NetWeaver software integration platform exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:1798-1)
This update for mariadb-100 fixes the following issues : mariadb-100 was updated to version 10.0.44 bsc1171550 CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. CVE-2020-2812: Fixed an issue which could have resulted in unauthorized abilit...
PuTTY Encryption DoS
The vulnerability of the PuTTY encryption protection tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
TIFF File Function Heap Buffer Overflow DoS
The vulnerability of the cpSeparateBufToContigBuf function in software for viewing, editing, and converting TIFF files relates to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...
libjpeg Heap Buffer Overflow DoS
The vulnerability of the jdhuff.c component in the libjpeg library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...
libjpeg Heap Buffer Overflow DoS
The vulnerability of the jpegmemavailable function jmemnobs.c in the libjpeg image processing library involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service failures...
libjpeg Heap Buffer Overflow DoS
The vulnerability of the readpixel function in the image processing library libjpeg is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0945-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0933-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for rust, rust-cbindgen (moderate)
openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0945-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has two fixes is now...
Security update for rust, rust-cbindgen (moderate)
openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0933-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now...
GetInstalledPackages function in the Data Compromise
The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential...
OpenSSL X509_NAME_oneline Buffer Overflow DoS
The vulnerability of the X509NAMEoneline function in the OpenSSL library is related to the execution of operations within acceptable buffer data limits. Exploitation of this vulnerability could allow a malicious actor to gain unauthorized access to confidential data or cause service failures...
OpenOffice.org Buffer Overflow DoS
The vulnerability of the OpenOffice.org component of the LibreOffice office software package is related to the operation of functions that exceed acceptable data buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a specially...
LibreOffice OpenOffice.org DoS
The vulnerability of many components of the OpenOffice.org module of the LibreOffice office software package is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Connected User Experience Telemetry Service Windows DoS
The vulnerability of the Connected User Experience and Telemetry Service services in Microsoft Windows operating systems is related to insufficient verification of permission assignment for critical resources. Exploiting this vulnerability can allow attackers to cause service failures...
The Fear of Vendor Lock-in Leads to Cloud Failures
Vendor lock-in has been an often-quoted risk since the mid-1990’s. Fear that by investing too much with one vendor, an organization reduces their options in the future. Was this a valid concern? Is it still today? The Risk Organizations walk a fine line with their technology vendors. Ideally, you...
OpenOffice Impress Vulnerable
The vulnerability of the Impress module in the OpenOffice office package is related to incorrect handling of integer values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...