8040 matches found
CVE-2020-6221
Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2020-6223
The CVE-2020-6223 entry affects SAP Business Objects Business Intelligence Platform (versions 4.1 and 4.2). The vulnerability allows an attacker to modify certain error pages rendered by the application, enabling Content Spoofing that could misdirect users. The available connected documents reaff...
CVE-2020-6218
The CVE-2020-6218 entry concerns SAP Business Objects Business Intelligence Platform, with vulnerable components/areas in Admin tools and Query Builder. Affected versions are 4.1 and 4.2. The description indicates an information disclosure risk where an attacker can access information that should...
Security Bulletin: IBM QRadar SIEM is vulnerable to instantiation of arbitrary objects (CVE-2020-4272)
Summary IBM QRadar SIEM is vulnerable to vulnerable to instantiation of arbitrary objects based on user-supplied input. Vulnerability Details CVEID: CVE-2020-4272 DESCRIPTION: IBM QRadar could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Windows Push Notification Service Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this...
Win32k Information Disclosure Vulnerability
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log ...
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on ...
Media Foundation Information Disclosure Vulnerability
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log onto ...
Security Updates for Microsoft Excel Products (April 2020)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...
Information Disclosure
auth0.js is vulnerable to information disclosure. Error objects are returned by the library containing confidential information such as the original request of the user or the plaintext password entered by the user...
Same-Origin Policy Bypass
firefox is vulnerable to Same-Origin policy bypass. A flaw was found in the way Firefox handled frame objects with certain names. An attacker could use this flaw to cause a plug-in to grant its content access to another site or the local file system, violating the same-origin policy...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as two use-after-free flaws were found in the Firefox mObserverList and mChannel objects. Malicious content could use these flaws to execute arbitrary code with the privileges of the user running Firefox...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists as the flaws in the CORBA implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects...
Integer Overflows
WebKitGTK+ is vulnerable to integer overflows. It is due to a flaw in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari , allowing remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving Text objects...
Denial Of Service (DoS)
squid is vulnerable to denial of service. A flaw was found in the way squid stored HTTP headers for cached objects in system memory. An attacker could cause squid to use additional memory, and trigger high CPU usage when processing requests for certain cached objects, possibly leading to a denial...
Update Rollup 13 for System Center 2012 R2 Operations Manager
Update Rollup 13 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Operations Manager. This article also contains the installation instructions for this update. Issues that are fixed...
November 11, 2014 update for PowerPoint 2007 (KB2597972)
November 11, 2014 update for PowerPoint 2007 KB2597972 This article describes update KB2597972 for Microsoft PowerPoint 2007 that was released on November 11, 2014. This update improves the user experience in Office 2010 for when you use OLE objects in an Office 2010 application. How to download...
CVE-2020-11630
The CVE-2020-11630 issue affects EJBCA: versions before 6.15.2.6 and 7.x before 7.3.1.2. The root cause is improper verification during deserialization of serialized objects exchanged between nodes over the Peers protocol, allowing insecure objects to be deserialized. This addresses a high-severi...
