PT-2020-5234 · Microsoft · Windows Overlay Filter +1

Name of the Vulnerable Software and Affected Versions: Windows Overlay Filter affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Overlay Filter component. This can allow an attacker to impact the confidentiality, integrit...

PT-2020-5293 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Kerberos protocol in the Windows operating system, which is associated with a violation of the data protection...

PT-2020-5204 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to insufficient input validation in the browser. It may allow a remote attacker to access protected information. Recommendations: At the moment, ther...

PT-2020-5216 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: The issue is related to errors in...

The vulnerability of Adobe Reader Mobile software, related to deficiencies in access control, allows a perpetrator to disclose protected information.

The vulnerability of Adobe Reader Mobile software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of Blink’s web page display mechanism in the Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PDFium web browser’s PDF-content processing component in Google Chrome relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

PT-2020-5294 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for system data in the Windows operating system. It allows an attacker to disclose protected information in Windows error reports. This can...

PT-2020-5213 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Chakra Scripting Engine, which can be exploited by an attacker to gain access to protected information. This...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

Default credentials

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

UBUNTU-CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

Imagemagick Studio ImageMagick Security Breach

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick version 6.9.11-40 and version 7.x and...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

The vulnerability of the “energo” database of the KTS “Mayak”, which allows a intruder to gain unauthorized access to protected information

The vulnerability of the “energo” database of the “Mayak” system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

CVE-2020-28937

OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information PHI stored in the application, via a direct request for the /tests/ URI...

CVE-2020-28937

OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information PHI stored in the application, via a direct request for the /tests/ URI...

Play Framework Security Vulnerability

Lightbend Play Framework is a web application framework written in the Scala language from Lightbend, Inc. A security vulnerability exists in Play Framework versions 2.8.0 through 2.8.4, which stems from a carefully crafted JSON payload sent as a form field that causes data amplification. This...

The vulnerability of the security mechanisms for server account data in Cisco Expressway software using Relay NAT (TURN) allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection mechanisms of the Cisco Expressway server’s Traversal Using Relay NAT TURN software relates to access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...