PT-2020-6223 · Pear +6 · Archive Tar +6

Name of the Vulnerable Software and Affected Versions: Archive Tar versions 1.4.10 and earlier Description: The issue is related to the deserialization of untrusted data in the Archive Tar class of the PEAR PHP library. It allows a remote attacker to overwrite protected files using a specially...

The vulnerability of the Apache CXF web service framework, related to connection establishment errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of Apache CXF web services is related to errors during connection establishment. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device allows a intruder to gain unauthorized access to protected information.

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to...

Op protected childhood: 113 online child predators arrested

By Waqas The arrests took place as part of Operation protected childhood initiated by ICE, HSI, MJSP against child sexual abuse material CSAM. This is a post from HackRead.com Read the original post: Op protected childhood: 113 online child predators arrested...

The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using IIOP and T3 protocols...

The vulnerability of the Installation component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Installation component of the Oracle Business Intelligence Enterprise Edition software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

CVE-2020-12333

Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12316

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12355

Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in IntelR TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

The vulnerability of the CAL component of the Oracle Hospitality RES 3700 system management software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CAL component of the Oracle Hospitality RES 3700 restaurant management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using TCP...

The vulnerability of the Pre-Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Pre-Login component of the Oracle FLEXCUBE Direct Banking system relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...

The vulnerability in the V8 engine of Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the V8 engine implementation in Google Chrome browsers is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability of the Adobe Digital Editions e-book reading program, related to reading beyond the buffer limit, allows a intruder to disclose protected information.

The vulnerability of the Adobe Digital Editions e-book reading software relates to reading outside the buffer boundaries. Exploiting this vulnerability could allow an intruder to disclose protected information...

Vulnerability of the Server component: Security: LDAP Auth of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Server component’s Security: LDAP Auth component of the MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected informati...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Installation component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Oracle Hospitality Reporting and Analytics’ installation component is related to lack of access control measures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ANGLE graphics engine in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ANGLE graphics engine in the Google Chrome browser is related to the storage beyond the buffer memory boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

PT-2020-4797 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Word, associated with authentication weaknesses. Exploitation of this issue may allow an attacker to disclose protected...

PT-2020-4862 · Microsoft · Windows Delivery Optimization +1

Name of the Vulnerable Software and Affected Versions: Windows Delivery Optimization affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Delivery Optimization service, which can allow an attacker to obtain unauthorized access t...

Intel® QAT for Linux Advisory

Summary: A potential security vulnerability in the Intel® QuickAssist Technology QAT for Linux may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12333 Description: Insufficiently protected...