CVE-2020-16992

Azure Sphere Elevation of Privilege Vulnerability...

CVE-2020-16988

Azure Sphere Elevation of Privilege Vulnerability...

CVE-2020-16990

Azure Sphere Information Disclosure Vulnerability...

CVE-2020-16994

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16989

Azure Sphere Elevation of Privilege Vulnerability...

CVE-2020-16998

DirectX Elevation of Privilege Vulnerability...

CVE-2020-16993

Azure Sphere Elevation of Privilege Vulnerability...

CVE-2020-16981

Azure Sphere Elevation of Privilege Vulnerability...

CVE-2020-16984

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16986

Azure Sphere Denial of Service Vulnerability...

CVE-2020-27694

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 has updated a specific critical library that may vulnerable to attack...

Facebook WhatsApp for iOS logging library resource management error vulnerability

Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. The application uses the contact information in a smartphone to find contacts using the software to send texts, pictures, etc. A security vulnerability exists in t...

Kaixin Electronic Document Inventory in Arbitrary File Download Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library is vulnerable to an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on...

CVE-2020-24631

A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...

Web Cache Poisoning

Overview Affected versions of this package are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon ;, they can cause a difference in the interpretation of the request between the proxy running with defaul...

UBUNTU-CVE-2020-26160

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for m"aud" which is allowed by the specification. Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lac...

USN-4560-1 ruby-gon vulnerability

It was discovered that Gon gem did not properly escape certain input. An attacker could use this vulnerability to execute a cross-site scripting XSS attack...

USN-4552-1 pam-python vulnerability

Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root...

USN-4494-1 gupnp vulnerability

It was discovered that GUPnP incorrectly handled certain subscription requests. A remote attacker could possibly use this issue to exfiltrate data or use GUPnP to perform DDoS attacks...

UBUNTU-CVE-2020-14392

An untrusted pointer dereference flaw was found in Perl-DBI 1.643. A local attacker who is able to manipulate calls to dbddblogin6sv could cause memory corruption, affecting the service's availability...