6803 matches found
Huawei EulerOS: Security Advisory for iSulad-kit (EulerOS-SA-2020-1290)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
This Week in Security News: Operation Overtrap Targets Japanese Online Banking Users and Everything You Need to Know About Tax Scams
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the number of ways Operation Overtrap can infect or trap victims with its payload. Also, read about how to protect your personal...
Unauthorized Access Vulnerability in Kodak Video Surveillance Devices
hereinafter referred to as KODAK is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to solve the visual communication and management...
Intel NUC elevation of privilege vulnerability (CNVD-2020-21234)
The Intel NUC Kit is a small desktop computer from Intel Corporation USA. An elevation of privilege vulnerability exists in the firmware in the Intel NUC, which arises from the program's failure to properly restrict buffers and can be exploited by a local attacker to elevate privileges...
Intel NUC Input Validation Error Vulnerability (CNVD-2020-21236)
The Intel NUC Kit is a small desktop computer from Intel Corporation USA. An input validation error vulnerability exists in the firmware in Intel NUC, which can be exploited by a local attacker to elevate privileges...
Font Awesome 4.0.0-RC15 & RC16 - API Token & Access Token Disclosure
The vulnerability exposes the Font Awesome API token and access token for users who have configured the plugin to use a kit. If compromised, these tokens could give an unauthorized person access to that user’s list of kits and kit settings...
DEBIAN-CVE-2020-10233
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...
CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
CVE-2020-10233
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...
DEBIAN-CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
UBUNTU-CVE-2020-10233
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...
CVE-2020-10233
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...
UBUNTU-CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
The Sleuth Kit (TSK) Stack Buffer Overflow Vulnerability
The Sleuth Kit TSK is a set of command line tools and a C library that lets you analyze disk images and recover files from them. A stack buffer overflow vulnerability exists in the YAFFS file timestamp parsing logic of yaffsfsistat in fs/yaffs.c in The Sleuth Kit TSK 4.8.0 and earlier. No detaile...
CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...
CVE-2020-10232
The Sleuth Kit (TSK) up to version 4.8.0 contains a stack buffer overflow in the YAFFS file timestamp parsing in yaffsfs_istat() (fs/yaffs.c). Affected component is the YAFFS timestamp parsing logic; impact is high (potential crash or exploitation as implied by CVSS). Remediation: upgrade to newe...