474 matches found
The vulnerability of the reduceRight method in Thunderbird email clients, Firefox browsers, and the SeaMonkey software suite allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the reduceRight method in Thunderbird email clients, Firefox browsers, and the SeaMonkey software suite is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures remotely...
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...
CVE-2020-10517
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository conten...
The vulnerability of the vhost-crypto module in the libraries and drivers for fast packet processing in dpdk allows a hacker to gain access to confidential data.
The vulnerability of the vhost-crypto module in the libraries and drivers for fast packet processing in dpdk is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the stralloc_readyplus function in the netqmail mail client allows a hacker to trigger a service failure.
The vulnerability of the strallocreadyplus function in the netqmail mail client is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the `update_recv_order` function in the RDP client FreeRDP allows a intruder to gain unauthorized access to protected information.
The vulnerability of the updaterecvorder function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the update_recv_order function in the RDP client FreeRDP allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the updaterecvorder function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the Linux kernel’s driver/tty/vt/keyboard.c file, which allows a hacker to execute arbitrary code.
The vulnerability in the Linux kernel’s driver/tty/vt/keyboard.c component is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...
The vulnerability of the whoopsie service in the Ubuntu operating system allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the whoopsie service in the Ubuntu operating system is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
CVE-2020-13776
A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or "0x" followed by hexadecimal digits. When the usernames are used by systemd, for example in service units, an unexpected user may be used instead. In some particular configurations, this flaw...
DEBIAN-CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
Buffer overflow
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...
CVE-2020-13776
CVE-2020-13776 (systemd) affects systemd up to version v245, where it mishandles usernames that start with decimal digits or 0x followed by hex digits. This can enable privilege escalation to root, as demonstrated by the 0x0 user account scenario. The issue is noted as a consequence of an incompl...
The vulnerability of the FTS3 virtual table module in the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 virtual table module in the SQLite database management system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...