The vulnerability of Mentor’s Nucleus operating system, related to insufficient checking of DHCP packets, allows attackers to compromise the accessibility and integrity of the protected information.

The vulnerability of Mentor’s Nucleus operating system lies in insufficient testing of DHCP packets. Exploiting this vulnerability allows a remote attacker to compromise the accessibility and integrity of the protected information...

The vulnerability of the Adobe Digital Editions e-book reading program, related to reading beyond the buffer limit, allows a intruder to disclose protected information.

The vulnerability of the Adobe Digital Editions e-book reading software relates to reading outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, is related to incorrect session duration settings, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, is related to incorrect session duration settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protecte...

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system allows a intruder to disclose protected information.

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information throug...

The vulnerability of the FortiSIEM security management system, related to the use of cryptographic algorithms containing defects, allows attackers to gain unauthorized access to protected information.

The vulnerability of the FortiSIEM security management system is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

FreeBSD : Gitlab -- Multiple Vulnerabilities (01bde18a-2e09-11ea-a935-001b217b3468)

SO-AND-SO reports : Group Maintainers Can Update/Delete Group Runners Using API GraphQL Queries Can Hang the Application Unauthorized Users Have Access to Milestones of Releases Private Group Name Revealed Through Protected Tags API Users Can Publish Reviews on Locked Merge Requests DoS in the...

PT-2020-1364 · Cisco · Cisco Data Center Network Manager

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager affected versions not specified Description: The issue is related to multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager, which could allow an authenticated, remot...

Gitlab -- Multiple Vulnerabilities

The GitLab Team reports: Group Maintainers Can Update/Delete Group Runners Using API GraphQL Queries Can Hang the Application Unauthorized Users Have Access to Milestones of Releases Private Group Name Revealed Through Protected Tags API Users Can Publish Reviews on Locked Merge Requests DoS in t...

Multiple Apple Product Input Validation Vulnerabilities (CNVD-2020-01910)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple iOS is a smart TV operating system.Apple...

The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...

Vulnerability of the __btrfs_free_extent function (fs/btrfs/extent-tree.c) in the Linux operating system, which allows an attacker to gain unauthorized access to protected information

The vulnerability of the btrfsfreeextent function fs/btrfs/extent-tree.c in the Linux operating system is related to the lack of protection for metadata. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...

The vulnerability of the file_copy_fallback() function in the Glib library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the filecopyfallback function in the Glib library is related to incorrect handling of permissions. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2019-8568

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system...

The vulnerability in the Firefox web browser, related to the lack of protection for service data, allows a hacker to gain unauthorized access to protected information.

The vulnerability in the Firefox web browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Microsoft Authentication Library (MSAL), which stems from the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the Microsoft Authentication Library MSAL is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...

The vulnerability of the process for creating management certificates, which involves identifying and accessing the server for service providers of Juniper Networks’ SBR Carrier, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the process for creating certificates that manage identity and access to servers for Juniper Networks SBR Carrier service providers is related to deficiencies in the protection of registration data. Exploiting this vulnerability could allow a perpetrator to gain unauthorized...

The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the McAfee Advanced Threat Defense software lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the McAfee Advanced Threat Defense security tool lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...