PT-2020-3913 · Microsoft · Windows Active Directory Integrated Dns +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory integrated DNS ADIDNS affected versions not specified Description: An information disclosure issue exists due to the mishandling of objects in memory by Active Directory integrated DNS ADIDNS. This allows an...

The vulnerability of the Windows Delivery Optimization Service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows Delivery Optimization Service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created script or application...

The vulnerability of the WpcDesktopMonSvc component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the WpcDesktopMonSvc component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

USN-4154-1 sudo vulnerability

Joe Vennix discovered that Sudo incorrectly handled certain user IDs. An attacker could potentially exploit this to execute arbitrary commands as the root user...

Couchbase Server Resource Management Error Vulnerability

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . A resource management error vulnerability exists in Couchbase Server versions 4.6.3...

CVE-2019-8981

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the needbytes value is mismanaged...

CVE-2019-8981

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the needbytes value is mismanaged...

CVE-2019-8981

Removed by vendor...

CVE-2019-8981

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the needbytes value is mismanaged...

Can Everybody Read the US Terrorist Watch List?

After years of claiming that the Terrorist Screening Database is kept secret within the government, we have now learned that the DHS shares it "with more than 1,400 private entities, including hospitals and universities...." Critics say that the watchlist is wildly overbroad and mismanaged, and...

DEBIAN-CVE-2016-6787

kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224...

The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to compromise the security of the protected information.

The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to errors in managing registration data. Exploiting this vulnerability could allow an intruder, operating locally, to compromise the security of protected information due to the storage of closed keys...

USN-1766-1: pam-xdg-support vulnerability

Zbigniew Tenerowicz and Sebastian Krzyszkowiak discovered that pam-xdg-support incorrectly handled the PATH environment variable. A local attacker could use this issue in combination with sudo to possibly escalate privileges...

Google Chrome < 6.0.472.62 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 6.0.472.62. Such versions are reportedly affected by multiple vulnerabilities : - There is a bad cast with malformed SVGs. Issue 55114 - The buffer is mismanaged in the SPDY protocol. Issue 55119 - A cross-origin property...