4414 matches found
CVE-2020-7605
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...
Memory corruption vulnerability exists in WPS Office (CNVD-2020-23730)
WPS Office is a Kingsoft office software produced by the office software, you can realize the office software commonly used text, forms, presentations and other functions. WPS Office memory corruption vulnerability, attackers can use the vulnerability to cause the program to crash, may obtain...
Intel Graphics Driver for Windows - Lenovo Support US
No description provided...
Realtek Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30506 Potential Impact: DLL preloading and potential abuses Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-19705 Summary Description: Realtek has released a software security update for the Realtek Audio Drivers for Windows. This update...
Realtek Audio Driver Vulnerability - Lenovo Support US
No description provided...
CVE-2020-1751
An out-of-bounds write vulnerability was found in glibc when handling signal trampolines on PowerPC. The backtrace function did not properly check the array bounds when storing the frame address resulting in a denial of service or potential code execution. The highest threat from this vulnerabili...
Data Modem Buffer Overflow Vulnerability in Multiple Qualcomm Products
Qualcomm MDM9206, etc. are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The SDX24 is a modem.The SDA660 is a central processing unit CPU product. A buffer overflow vulnerability exists in Data Modem in multiple Qualcomm products.The vulnerability...
Fedora 31 : golang-vitess / hugo (2020-bd764dd275)
"Rebuilt to fix GHSA-jf24-p9p9-4rjh Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory FEDORA-2020-bd764dd275. include"compat.inc"; if description scriptid134140; scriptversion"1.1"; scriptcvsdate"Date: 2020/02/28";...
Fedora 30 : caddy / etcd / hugo (2020-279c61dd70)
"Rebuilt to fix GHSA-jf24-p9p9-4rjh Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory FEDORA-2020-279c61dd70. include"compat.inc"; if description scriptid134130; scriptversion"1.1"; scriptcvsdate"Date: 2020/02/28";...
PT-2020-6964 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential deadlock in the f2fs write compressed pages function of the Linux kernel's f2fs file system. This is due to incorrect resource handling. Exploitatio...
AppInfo AiCheckSecureApplicationDirectory Bypass
The AppInfo service handles requests for UAC elevation. There’s an issue with the checking of secure directories which allows a user to install a UIAccess application without requiring full access to a secure directory leading to the potential for EoP Recent assessments: busterb at May 09, 2019...
CVE-2020-8945
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification...
CVE-2020-8945
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification...
Mail.ru: [geekbrains.ru] Reflected XSS via Angular Template Injection
Potential XSS due to use of Angular templates...
Intel CSME Vulnerability - Lenovo Support US
No description provided...
FreeBSD : sudo -- Potential bypass of Runas user restrictions (b4e5f782-442d-11ea-9ba9-206a8a720317)
Todd C. Miller reports : Sudo's pwfeedback option can be used to provide visual feedback when the user is inputting their password. For each key press, an asterisk is printed. This option was added in response to user confusion over how the standard Password: prompt disables the echoing of key...
RUSTSEC-2020-0049 Use-after-free in Framed due to lack of pinning
Affected versions of this crate did not require the buffer wrapped in Framed to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free. The flaw was corrected by making the affected functions accept Pin instead of &mut self...
CVE-2019-20440
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the update API documentation feature of the API Publisher...
Clario: CSS Injection on static.mackeeper.com - Potential XSS
Summary CSS injection vulnerabilities arise when an application imports a style sheet from a user-supplied URL, or embeds user input in CSS blocks without adequate escaping. They are closely related to cross-site scripting XSS vulnerabilities but often trickier to exploit. Steps to reproduce the...
CVE-2019-20394
A double-free flaw occurs in libyang in function yyparse when a type statement is used in a notification statement. Applications that use libyang to process untrusted input YANG files may be vulnerable to this flaw, possibly causing a crash or potential code execution...