Debian DSA-4763-1 : teeworlds - security update

It was discovered that insufficient sanitising of received network packets in the game server of Teeworlds, an online multi-player platform 2D shooter, could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2020-17397

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Memory corruption

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17397

CVE-2020-17397 affects Parallels Desktop (notably 15.1.4) where a memory corruption triggered by improper validation of data in network packet handling allows local privilege escalation to the hypervisor context. Exploitation requires high-privilege code execution on the target guest; no public e...

CVE-2020-17397

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Parallels Desktop Out-of-Bounds Access Elevation of Privilege Vulnerability (CNVD-2020-46859)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds access elevation of privilege vulnerability exists in the handling of network packets in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of...

Parallels Desktop Networking Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

Monero (Lithium Luna) Epee library security vulnerability

Monero Lithium Luna is a digital currency. Epee library is one of the open source Levin libraries.A security vulnerability exists in the Levin deserialization feature of Epee library used in Monero Lithium Luna version 0.12.2.0-master-ffab6700 and other cryptocurrencies. An attacker could exploit...

CVE-2020-14336

A flaw was found in the Restricted Security Context Constraints SCC, where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerabilit...

Schneider Electric Easergy T300 Input Validation Error Vulnerability

The Schneider Electric Easergy T300 is a remote terminal unit for the power industry from Schneider Electric, France. An input validation error vulnerability in the Schneider Electric Easergy T300 using firmware version 1.5.2 and earlier can be exploited by an attacker to disable the web server...

CVE-2020-7504

A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent...

CVE-2020-7502

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

CVE-2020-7504

A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent...

Input validation

A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent...

The vulnerability of the Hyper-V hardware virtualization system for Microsoft Windows operating systems allows a attacker to trigger a failure mode that causes system downtime.

The vulnerability of the Hyper-V hardware virtualization technology for Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to induce a service failure by sending specially crafted network packets...

CVE-2020-0909

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by...

Design/Logic Flaw

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by...

CVE-2020-0909

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by...

EUVD-2020-2377

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by...

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...