6648 matches found
USN-4568-1 brotli vulnerability
It was discovered that Brotli incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash...
USN-4568-1: Brotli vulnerability
It was discovered that Brotli incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash...
USN-4562-1: kramdown vulnerability
It was discovered that kramdown insecurely handled certain crafted input. An attacker could use this vulnerability to read restricted files or execute arbitrary code...
USN-4534-1: Perl DBI module vulnerability
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose sensitive information...
USN-4534-1 libdbi-perl vulnerability
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose sensitive information...
Alfresco Access Control Error Vulnerability
Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. A security vulnerability exists in...
USN-4509-1 libdbi-perl vulnerabilities
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. CVE-2013-7490 It was discovered that Perl DBI module incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive...
USN-4500-1 bsdiff vulnerabilities
It was discovered that bsdiff mishandled certain input. If a user were tricked into opening a malicious file, an attacker could cause bsdiff to crash or potentially execute arbitrary code...
USN-4499-1 MilkyTracker vulnerabilities
It was discovered that MilkyTracker did not properly handle certain input. If a user were tricked into opening a malicious file, an attacker could cause MilkyTracker to crash or potentially execute arbitrary code...
Ubuntu 16.04 LTS : MilkyTracker vulnerabilities (USN-4499-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4499-1 advisory. It was discovered that MilkyTracker did not properly handle certain input. If a user were tricked into opening a malicious file, an attacker could cause...
USN-4493-1 cryptsetup vulnerability
It was discovered that cryptsetup incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code...
Cisco Jabber for Windows Protocol Handler Command Injection (cisco-sa-jabber-vY8M4KGB)
According to its self-reported version, Cisco Jabber for Windows is affected by a Windows Protocol Handler Command Injection vulnerability. The vulnerability exists in the web-based user interface due to improper handling of input to the application protocol handlers. An unathenticated, remote...
USN-4476-1 nss vulnerability
It was discovered that NSS incorrectly handled some inputs. An attacker could possibly use this issue to expose sensitive information...
CVE-2020-13863
The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...
CVE-2020-1182
A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...
PT-2020-3765 · Microsoft · Dynamics 365 For Finance/Operations
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11 Description: A remote code execution issue exists, allowing an attacker to gain remote code execution via server-side script execution on the victim server. An...
PT-2020-3977 · Microsoft · Dynamics 365 For Finance/Operations
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations version 10.0.11 Description: The issue is related to errors in input data processing, which can allow a remote attacker to execute arbitrary code. An authenticated attacker with privileges to...
Apache Airflow Remote Code Execution Vulnerability (CNVD-2020-44094)
Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security vulnerability exists in Apache Airflow 1.10.10 and earlier...