Microsoft Windows Multiple Vulnerabilities (KB4565524)

This host is missing a critical security update according to Microsoft KB4565524 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1359

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384...

CVE-2020-1384: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359...

PT-2020-3164

Name of the Vulnerable Software and Affected Versions Windows Cryptography Next Generation CNG affected versions not specified Description The issue exists due to improper handling of memory objects by the Windows Cryptography Next Generation CNG service, which can allow an attacker to elevate...

PT-2020-3174

Name of the Vulnerable Software and Affected Versions Windows Cryptography Next Generation CNG Key Isolation service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to improper memory handling by the Windows Cryptography...

htl-template-loader (>=1.2.0, <=3.0.0), ideal-cli (>=1.0.0-alpha.1, <=1.0.0-alpha.3) +1 more potentially affected by unknown CVE via standard-version (8.0.0)

standard-version NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on standard-version and may be impacted: - htl-template-loader =1.2.0, =1.0.0-alpha.1, =1.0.0-alpha.3 - next-standard-version 2.1.3 Source cves: unknown CVE Source advisory...

htl-template-loader (>=1.2.0, <=3.0.0), ideal-cli (>=1.0.0-alpha.1, <=1.0.0-alpha.3) +1 more potentially affected by unknown CVE via standard-version (8.0.0)

standard-version NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on standard-version and may be impacted: - htl-template-loader =1.2.0, =1.0.0-alpha.1, =1.0.0-alpha.3 - next-standard-version 2.1.3 Source cves: unknown CVE Source advisory...

PT-2020-22460

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: backup, lex string,...

PT-2020-22257

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse key value functions. No information i...

PT-2020-22396

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: parser get next char, parser get...

PT-2020-22306

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse config functions. No information is...

PT-2020-22224

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, specifically a crash type identified as Global-buffer-overflow READ 3. The crash state involves...

PT-2020-22505

Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a crash type of UNKNOWN WRITE. Technical details about the crash state include the functions vips foreign load gif render, vips foreign load gif next page, and vips forei...

PT-2020-22409

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: asn1 get next, x509 parse ext certificate policies, and...

CVE-2020-4295

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4297

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4281

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4295

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4281

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4297

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...