DEBIAN-CVE-2020-11759

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer...

CVE-2020-6234

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

Privilege escalation

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

CVE-2020-6234

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Access to the video output control state is not properly restricted, allowing local users to cause a system hang via a read/write operation...

Xen Project Denial of Service (XSA-295)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple denial of service DoS vulnerabilities : - A denial of service DoS vulnerability exists in the LoadExcl and StoreExcl operations due to a possible infinite loop. An unauthenticate...

Code injection

An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...

CVE-2018-12126

Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...

Update Rollup 3 for System Center 2012 R2 Operations Manager

Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...

Deduplication filter marks files as deleted incorrectly and data corruption occurs on Windows Server 2012 R2 file server

Deduplication filter marks files as deleted incorrectly and data corruption occurs on Windows Server 2012 R2 file server This article describes an issue in which deduplication filter marks files as deleted incorrectly and data corruption occurs on Windows Server 2012 R2-based file server. Before...

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

Advantech WebAccess/NMS download.jsp Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the download.jsp...

Ruby Unauthorized Operation Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the software developer Gyohiro Matsumoto. A security vulnerability exists in Ruby. An attacker can exploit this vulnerability to create arbitrary files...

Webinar — Autonomous Breach Protection: The New Security Paradigm Shift

Organizations today struggle with multi-product security stacks, that are expensive to purchase and maintain and also require a highly skilled security team to manually integrate and operate. The current Coronavirus crisis that has imposed a strict quarantine on organizations and security teams...

RHEL 7 : podman (RHSA-2020:1227)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1227 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use contain...

“Operation Poisoned News” infecting iPhones with LightSpy spyware

By Deeba Ahmed The operation uses "Local News Websites" to spread spyware infection. Here's what's going on and how. This is a post from HackRead.com Read the original post: "Operation Poisoned News" infecting iPhones with LightSpy spyware...

PowerShell-Suite

This repository is an offensive tool for Windows UAC User Account Control bypass. The tool, named "Bypass-UAC," provides a framework to perform UAC bypasses based on auto-elevating IFileOperation COM object method calls. It rewrites PowerShell's PEB Portable Executable Binary to give it the...

CVE-2018-6759

The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors in the TCP Urgent Pointer during the “connect” operation when connecting to a remote host. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially...

The vulnerability of the Windows device installation dispatcher allows a perpetrator to execute processes with elevated privileges.

The vulnerability of the Windows device management agent is related to errors in file operations. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges using a specially created application...