8910 matches found
UBUNTU-CVE-2020-12829
In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA macro while handling MMIO write operations through the sm5012denginewrite callback. A local attacker could abuse this flaw to crash the QEMU process in sm5012doperatio...
i-p.ro Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1171503 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
i-web.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1164771 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
UBUNTU-CVE-2019-20797
An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by ISendPacket or ISendPacketTo in inetwork.c...
IBM i SQL Injection Vulnerability
IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.2, 7.3 and 7.4. A local attacker could exploit the vulnerability to access unauthorized sensitive information...
CVE-2020-4345
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318...
CVE-2020-4345
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318...
Information disclosure
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318...
CVE-2020-4345
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318...
CVE-2020-4345
CVE-2020-4345 affects IBM i 7.2, 7.3, and 7.4 where under specific circumstances, complex SQL statements may allow a local user to access sensitive information. The IBM i vulnerability details specify the affected releases and confirm the root cause as an information disclosure resulting from cer...
mobilityonetransportation.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162912 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
i-offshore.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162512 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
[SECURITY] Fedora 32 Update: squid-4.11-1.fc32
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
Security Bulletin: Vulnerability CVE-2020-4345 in SQL affects IBM i
Summary SQL is used on IBM i. IBM i has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-4345 DESCRIPTION: IBM i users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to...
USN-4345-1: Linux kernel vulnerabilities | Cloud Foundry
Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial...
i-teddy.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160195 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Working From Home. So Far, So Much Learned.
Hello all! I'm Nicole Fitzpatrick, Deputy General Counsel at Akamai. I also sit on the D&I Executive Steering Committee. Normally I'd be in our Cambridge office about now, but like so many of us I am working from home and writing this surrounded by four kids, the dog and my husband not written in...
PT-2020-3072
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a buffer overflow in the Direct IO function of the Linux kernel, which can be exploited to gain unauthorized access to protected information or cause a denial o...
RUSTSEC-2020-0021 rio allows a use-after-free buffer access when a future is leaked
When a rio::Completion is leaked, its drop code will not run. The drop code is responsible for waiting until the kernel completes the I/O operation into, or out of, the buffer borrowed by rio::Completion. Leaking the struct will allow one to access and/or drop the buffer, which can lead to a...