13597 matches found
CVE-2020-9324
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
CVE-2020-9324
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...
CVE-2020-9324
CVE-2020-9324 affects Aquaforest TIFF Server 4.0 and is described in connected sources as allowing an Unauthenticated SMB hash capture via UNC path . The vulnerability is triggered over the network (attack vector: NETWORK) with low attack complexity and no authentication required, leading to a co...
UBUNTU-CVE-2019-15608
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
CVE-2019-15608
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
Internet Bug Bounty: CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()
Hello, There is an out-of-bounds write that is likely exploitable while performing Huffman decoding of Fax images. The technical details are as follows. Type: integer underflow produces out of bounds heap/etc write Platform: 32-bit Details: 390 MagickExport MagickPassFail HuffmanDecodeImageImage...
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: March 10, 2020
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stac...
Servicing stack update for Windows Server 2012: March 10, 2020
Servicing stack update for Windows Server 2012: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your devic...
Description of the security update for Word 2010: March 10, 2020
Description of the security update for Word 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Description of the security update for Office Online Server: March 10, 2020
None None...
Description of the security update for SharePoint Foundation 2013: March 10, 2020
Description of the security update for SharePoint Foundation 2013: March 10, 2020 Summary This security update resolves a vulnerability that occurs if SharePoint Server does not correctly sanitize a specially crafted request to an affected SharePoint server. To learn more about the vulnerability,...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Description of the security update for Office 2010: March 10, 2020
Description of the security update for Office 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Description of the security update for SharePoint Server 2010: March 10, 2020
Description of the security update for SharePoint Server 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1803: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1903 and 1909: March 10, 2020
None None...
JPaseto weak hash vulnerability
JPaseto is a Java library for creating and parsing Paseto . A weak hash vulnerability exists in JPaseto versions prior to 0.3.0. The vulnerability stems from the fact that JPaseto generates weak hashes when using v2.local tokens. No details of the vulnerability are provided at this time...