4827 matches found
Code injection
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...
CVE-2020-26601
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...
CVE-2020-26607
An issue was discovered in TimaService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 October 2020...
PT-2020-16480
Name of the Vulnerable Software and Affected Versions TimaService versions O8.x through Q10.0 Description An issue in TimaService allows an attacker to perform a privileged action via a modified intent. This is due to the mishandling of PendingIntent with an empty intent. Recommendations For...
PT-2020-16474
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue in DirEncryptService on Samsung mobile devices allows an attacker to perform a privileged actio...
CVE-2020-11881
An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964...
CVE-2020-1523: Undefined Security Weakness
A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4484476) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office Web Apps Server 2013 (KB4484481) farm-deployment
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
PT-2020-22363
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read error. It involves functions such as lwan parse rfc time, parse if modified since, and fuzz parse htt...
DEBIAN-CVE-2020-14939
An issue was discovered in savestructinternal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be modified to put any Lua code inside, leading to arbitrary code execution while loading...
Foxit PhantomPDF Signature Verification Bypass Vulnerability
PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A signature verification bypass vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10. An attacker can bypass signature verification by using a modified document or a document...
Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability (CNVD-2020-32458)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5. The vulnerability can be exploited to bypass signature verification with modified documents or...
CVE-2019-20837
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2019-20834
An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...
Input validation
An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...
Input validation
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2019-20834
An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...