PT-2021-28134

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 2, and the crash state...

AZL-44706 CVE-2020-16588 affecting package OpenEXR 2.3.0-6

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...

nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...

[SECURITY] Fedora 32 Update: dnf-plugins-core-4.0.18-1.fc32

Core Plugins for DNF. This package enhances DNF with builddep, config-manag er, copr, debug, debuginfo-install, download, needs-restarting, repoclosure, repograph, repomanage, reposync, changelog and repodiff commands. Additiona lly provides generatecompletioncache passive plugin...

PT-2020-4704

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.16 Description The issue is related to insufficient input validation in the shader generate main function of the Core component in Oracle VM VirtualBox. This can allow an attacker to gain unauthorized...

PT-2020-21843

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash issue was identified, characterized by a Segv on an unknown address. The crash involves the functions vips XYZ2Lab line, vips colour gen, and vips...

PT-2020-21773

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the generate inter prediction samples function, which is called by decode...

PT-2020-13348

Name of the Vulnerable Software and Affected Versions Yubico libykpiv versions prior to 2.1.0 Description An issue was discovered in the ykpiv util generate key function in lib/util.c, where incorrect error handling code can trigger an incorrect free. This could be used to cause a denial of servi...

PT-2020-22505

Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a crash type of UNKNOWN WRITE. Technical details about the crash state include the functions vips foreign load gif render, vips foreign load gif next page, and vips forei...

CVE-2020-14010

The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q aka name parameter...

Werkzeug generate Unauthorized Access

The vulnerability of the generate function in the Werkzeug web application library’s init.py file is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data...

generate-gh-repo (1.1.0), generate-project (>=0.7.0, <=1.0.0) +1 more potentially affected by CVE-2020-7630 via git-add-remote (1.0.0)

git-add-remote NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-add-remote and may be impacted: - generate-gh-repo 1.1.0 - generate-project =0.7.0, =1.0.4, =1.0.6 Source cves: CVE-2020-7630 Source advisory: SNYK:JS-GITADDREMOTE-564...

CVE-2020-6196

SAP BusinessObjects Mobile MobileBIService, version 4.2, allows an attacker to generate multiple requests, using which he can block all the threads resulting in a Denial of Service...

@luantm/strapi (1.0.1), alazares-prototype (0.1.0) +3 more potentially affected by CVE-2020-8123 via strapi-admin (>=3.0.0-alpha.4.9, <=3.0.0-beta.4)

strapi-admin NPM version =3.0.0-alpha.4.9, =3.0.0-alpha.4.3, =3.0.0-alpha.4.9, =3.0.0-alpha.26.2 - strapi-vn 3.0.0-alpha.21 Source cves: CVE-2020-8123 Source advisory: MEND:CVE-2020-8123...

CVE-2018-19441

An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers for robot secretkey values used for local and cloud authentication/authorization. If an attacker knows the serial number and is able to...

CVE-2020-0004

In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

UBUNTU-CVE-2019-19962

wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...

wolfSSL encryption issue vulnerability

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL versions prior to 4.3.0 that stems from the program failing to properly handle calls to the...

PT-2019-7135

Name of the Vulnerable Software and Affected Versions ace versions prior to 6.2.7+dfsg-2 Description The issue allows attackers to gain elevated privileges due to the generation of predictable file names in the /tmp directory by the generate doygen.pl script. Recommendations For versions prior to...

Google Android Information Disclosure Vulnerability (CNVD-2019-36404)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Google Android 9 and 10. The vulnerability stems from an account protection bypass issue caused by cache...