7596 matches found
CVE-2020-27998
An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle for example GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress...
The vulnerability of the Azure Functions service’s operating system for Windows allows attackers to escalate their privileges.
The vulnerability of the Azure Functions service’s operating system for Windows is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
OS Command Injection
systeminformation is vulnerable to OS command injection. The inetChecksite, services, inetChecksite, inetLatency, networkStats, services and processLoad functions allow an attacker to inject and execute arbitrary OS commands due to insufficient sanitization...
golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash
A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to supply specific...
CVE-2020-27183
A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user information, send arbitrary e-mails, escalate the privileges of arbitrary user accounts, and have unspecified other impact...
Industrial Control Device Vulnerability in CJ2M-CPU11 at Omron Automation (China) Co.
The OMRON Group is a manufacturer of automation control and electronic equipment. A vulnerability exists in CJ2M-CPU11 of Omron Automation China Co. for industrial control devices. An attacker could exploit the vulnerability to cause control functions to stop, resulting in production interruption...
CVE-2020-15681
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox 82...
CVE-2020-15681
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox 82...
CVE-2020-15681
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox 82...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the bypassing of security functions. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2020-9112
Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...
CVE-2020-16904
An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly...
Privilege escalation
An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly...
CVE-2020-16904 Azure Functions Elevation of Privilege Vulnerability
...
CVE-2020-16904
CVE-2020-16904 affects Azure Functions where access keys are not validated correctly for HTTP Functions, allowing an unauthenticated attacker to invoke the function without proper authorization. The vulnerability is an elevation of privilege issue tied to HTTP Functions’ access key validation. Mi...
The vulnerability of the cosl, sinl, sincosl, and tanl functions in the GNU C Library (glibc) allows a attacker to cause a system failure.
The vulnerability of the cosl, sinl, sincosl, and tanl functions in the GNU C Library glibc is related to the execution of these operations outside the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure by damaging the stack when trigonometric...
Azure Functions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly...
OSV-2020-2054 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26280 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelh void mcchroma...
PT-2020-4387 · Microsoft · Azure Functions
Name of the Vulnerable Software and Affected Versions: Azure Functions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this...
KLA11973 Multiple vulnerabilites in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Network Watcher Agent Virtual Machine Extension for Linux can be exploited...