KLA11970 ACE vulnerability in Adobe Flash Player

A NULL Pointer Dereference vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-58 Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list CVE-2020-9746...

APSB20-58 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address a critical vulnerability in Adobe Flash Player. Successful exploitation could lead to an exploitable crash, potentially resulting in arbitrary code execution in the context of...

Fedora 31 : firefox (2020-38b5ecdd73)

Added fixes for mozbz1661192, mozbz1640567 Wayland popup issues - Enabled build with PGO ---- - New upstream version 81.0.1 ---- - Disabled OpenH264 download from mozilla - Removed fdk-aac-free dependency ---- - Fixed usage of OpenH264 - Don't download OpenH264 from Cisco but use Fedora packages...

Cisco IOS XE Software Information Disclosure (cisco-sa-info-disclosure-V4BmJBNF)

According to its self-reported version, IOS XE is affected by a information disclosure vulnerability. An authenticated, local attacker to access files from the flash: filesystem due to insufficient application of restrictions during the execution of a specific command. Please see the included Cis...

October 1, 2020—KB4577063 (OS Build 19041.546) Preview

None None...

CloudForms: Cross Site Request Forgery in API notifications

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash fi...

[SECURITY] Fedora 33 Update: f2fs-tools-1.14.0-1.fc33

NAND flash memory-based storage devices, such as SSD, and SD cards, have been widely being used for ranging from mobile to server systems. Since they are known to have different characteristics from the conventional rotational disks,a file system, an upper layer to the storage device, should adap...

Fedora: Security Advisory for f2fs-tools (FEDORA-2020-a0b24e9377)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-3477

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...

CVE-2020-3477

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...

Design/Logic Flaw

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...

CVE-2020-3477

CVE-2020-3477 affects Cisco IOS and IOS XE CLI parser. An authenticated, local attacker could obtain read-only access to files on the flash: filesystem due to insufficient command restrictions. Exploitation is local with no user interaction beyond authentication. Cisco’s advisory and related Ness...

CVE-2020-3477 Cisco IOS and IOS XE Software Information Disclosure Vulnerability

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...

Cisco IOS and IOS XE Software Information Disclosure Vulnerability

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...

PT-2020-13626 · Espressif · Esp32

Name of the Vulnerable Software and Affected Versions: ESP32 affected versions not specified Description: The issue concerns bypassing Secure Boot and Flash Encryption on ESP32 chips. It allows extracting decrypted flash data from a fully protected ESP32 chip using chip-level weaknesses, without...

PT-2020-14144 · Espressif · Esp32

Name of the Vulnerable Software and Affected Versions: Espressif ESP32 affected versions not specified Description: The issue concerns bypassing flash encryption by leveraging a design weakness in combination with EMFI. This allows for potential unauthorized access to encrypted data. There is no...

Hackers Target Porn Site Visitors Using Flash and Internet Explorer

Plus: Ransomware holds up schools, Zoom adds two-factor, and more of the week's top security news...

KLA11814 Use after free vulnerability in Adobe Flash Player

Use after free vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-30 Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list CVE-2020-9633 critical...

Code injection

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...

CVE-2020-8341

The CVE-2020-8341 entry concerns Lenovo ThinkPad BIOS/System Management Mode (SMM) protection. After resuming from S3 sleep on various BIOS versions, SPI Protected Range Registers (PRx) may not be set, but this does not undermine SMM BIOS Write Protection. The vulnerability centers on the PRx sig...